last executing test programs: 26.768303706s ago: executing program 2 (id=904): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701565e700000000000017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x2000c000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 23.352708734s ago: executing program 2 (id=913): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 22.355199619s ago: executing program 0 (id=921): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) accept(r0, 0x0, 0x0) 22.34651144s ago: executing program 2 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_open_dev$sg(0x0, 0x495, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0xc0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 21.435614906s ago: executing program 2 (id=924): socket(0x1, 0x1, 0x0) migrate_pages(0x0, 0x4421, 0x0, &(0x7f0000000400)=0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000001540)='GPL\x00', 0x4, 0x9d, &(0x7f0000001580)=""/157, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0xd, 0x7ffffffe, 0xc}, 0x10, 0xde20, r0, 0x0, &(0x7f0000001700)=[r0], &(0x7f0000001740), 0x10, 0x80000001}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x150480, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xc008aeba, 0x40000000072) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f02b, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00\x00\x00\x00\x00\x002\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) syz_io_uring_submit(0x0, 0x0, 0x0) 21.411024389s ago: executing program 0 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}]}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 20.351581781s ago: executing program 2 (id=929): syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 19.409059926s ago: executing program 0 (id=934): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000005d0000005d000000020000009e45d13617ee707f00000000000000000100000007001c000204000004000000020000000000000005000000020000000000001205000000060000000200000f010000000200000037dd00000200000001"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 19.353337407s ago: executing program 1 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_open_dev$sg(0x0, 0x495, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0xc0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 19.340157241s ago: executing program 3 (id=936): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x20040040}, 0x4044014) 19.246629334s ago: executing program 0 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) 18.930736603s ago: executing program 3 (id=938): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) 18.89544373s ago: executing program 1 (id=939): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb9713", 0x91}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="99f8ee40de143dd62dc7cf8951bd537eb95f29353b0e655a501fa595b474eb130c4caa8d31c1958f8c876e44e4d16a7a38c4f52e98dfd11ccf54c2e26cfff46bc27e0947e391847f604765a38dddda3600abb8aa5bed85ed170c14c9f864cd5f303c0f5768013e1f24a8579e3ddfbfa84c0773ee95be4910d8b476f68dc005e58b6eb0b949b3d2b860c2ea8c9f0ff61cf2b910513ebdbd724d3c3088034ecc6e555ca40b4c797b88b8e3f0efba5a", 0xae}, {&(0x7f00000007c0)="a6643c5a8d917ff4438f8b93b5bd73d1b3871afea241d79bc7d9ccd930fbf81d3b2b270ca358839d2cf3712108bed062b412eb799e681a6cde9bdcac5648ec9f4b0808e303d8ee189f22bd10afd8042c36b79dbe4270d22ac53a819a4d965ab776b4500ed7e9d18a936ac4423b6823aed7a2e822acf883af66a80887f153ea80eb289406cf63ff44e1d48d1a37244edf9b3bd6e14ac417126155d3086d3e0ebef87257433283fd74fe435609e5fc67767ab7a9c49fd6fe08bed196369f25bc8d", 0xc0}, {&(0x7f00000006c0)="6202873c4198136e1418d24a637e53f08567184b793f1e406fa7895129a74f70b9c472d23e723cab5314c51c56e1ce005d639d80db85dbbfdeef36e9266310d4e9fec2236051685e9a6aa2b3549780ca8e54faf1753b2514be24442960064b0938873974214721681403a3f18b14a2d8e0ed36c7975dc930170a0a3526ddc3c2f5ad4cdf728e832d8478ba5d0c04a5aa25df9dc7e185dfa193b198e4", 0x9c}, {&(0x7f0000000380)="361b0d0b2e2c95d7ac23a896f0932cc52bad2ad1a85e07", 0x17}, {0x0}], 0x5}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18.7374628s ago: executing program 1 (id=940): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 18.094323928s ago: executing program 1 (id=942): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0xffffffffffffff0f) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x7, 0xf, &(0x7f0000000880)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x0, 0xa, 0x7, 0x0, 0x30, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}], &(0x7f0000000900)='syzkaller\x00', 0xdc, 0x9c, &(0x7f0000000a00)=""/156, 0x41000, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x7, 0x8, 0x40d}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000002040)=[{0x4, 0x4, 0x2, 0x2}, {0x0, 0x2, 0x2, 0x8}, {0x3, 0x5, 0xd, 0x3}, {0x5, 0x5, 0x7, 0x7}, {0x1, 0x5, 0x8, 0x1}, {0x3, 0x3, 0xe, 0x4}, {0x2, 0x2, 0x6, 0xc}, {0x3, 0x1, 0x1, 0x6}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 18.093853647s ago: executing program 2 (id=943): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17.956576506s ago: executing program 0 (id=944): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x1, 0x1}, 0x21) 17.339373978s ago: executing program 3 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x30, 0x0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x6e}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) 17.289814866s ago: executing program 3 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}]}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.081157708s ago: executing program 1 (id=948): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 17.047014546s ago: executing program 4 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_open_dev$sg(0x0, 0x495, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0xc0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 16.567538345s ago: executing program 3 (id=950): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x1, 0x1}, 0x21) 16.566768996s ago: executing program 4 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xbc}}, 0x0) 16.33170454s ago: executing program 4 (id=952): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r3 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 15.723687802s ago: executing program 4 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.58410926s ago: executing program 3 (id=954): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 15.554617405s ago: executing program 1 (id=955): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 15.521366753s ago: executing program 4 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x30, 0x0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x6e}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) 15.31553892s ago: executing program 0 (id=957): socket(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) poll(&(0x7f0000000280)=[{r1, 0x480}], 0x1, 0xf0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.314635799s ago: executing program 4 (id=958): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.031804344s ago: executing program 32 (id=943): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 529.977621ms ago: executing program 33 (id=955): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 505.748231ms ago: executing program 34 (id=954): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 32.577503ms ago: executing program 35 (id=957): socket(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) poll(&(0x7f0000000280)=[{r1, 0x480}], 0x1, 0xf0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 36 (id=958): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): adv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.205559][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.216773][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.224019][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.250003][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.261398][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.268503][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.295018][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.308962][ T5834] hsr_slave_0: entered promiscuous mode [ 64.312868][ T5840] Bluetooth: hci1: command tx timeout [ 64.315348][ T5834] hsr_slave_1: entered promiscuous mode [ 64.325733][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.333522][ T5834] Cannot create hsr debugfs directory [ 64.348407][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.355371][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.381324][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.397083][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.404256][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.430664][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.472107][ T5831] Bluetooth: hci2: command tx timeout [ 64.472263][ T5836] Bluetooth: hci0: command tx timeout [ 64.477715][ T5831] Bluetooth: hci3: command tx timeout [ 64.489012][ T5840] Bluetooth: hci4: command tx timeout [ 64.553204][ T5826] hsr_slave_0: entered promiscuous mode [ 64.559287][ T5826] hsr_slave_1: entered promiscuous mode [ 64.565498][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.573958][ T5826] Cannot create hsr debugfs directory [ 64.603692][ T5830] hsr_slave_0: entered promiscuous mode [ 64.609674][ T5830] hsr_slave_1: entered promiscuous mode [ 64.615865][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.623874][ T5830] Cannot create hsr debugfs directory [ 64.646940][ T5823] hsr_slave_0: entered promiscuous mode [ 64.654654][ T5823] hsr_slave_1: entered promiscuous mode [ 64.660447][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.668492][ T5823] Cannot create hsr debugfs directory [ 64.931903][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.953399][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.966594][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.986480][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.025920][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.056142][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.065715][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.081158][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.118997][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.136852][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.160559][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.170949][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.243157][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.258924][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.268868][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.297507][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.316257][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.363643][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.390780][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.401851][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.411320][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.421769][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.448353][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.458670][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.495488][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.502785][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.514500][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.521546][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.543516][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.550564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.561501][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.568722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.590861][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.670898][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.681935][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.693112][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.700196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.744217][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.751308][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.761110][ T30] audit: type=1400 audit(1753301127.812:86): avc: denied { sys_module } for pid=5834 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.777440][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.820966][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.828104][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.861671][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.868815][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.990438][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.059032][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.093393][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.126025][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.133471][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.157436][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.164522][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.224477][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.287868][ T5834] veth0_vlan: entered promiscuous mode [ 66.334929][ T5834] veth1_vlan: entered promiscuous mode [ 66.351620][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.393506][ T5840] Bluetooth: hci1: command tx timeout [ 66.440508][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.466764][ T5835] veth0_vlan: entered promiscuous mode [ 66.491852][ T5834] veth0_macvtap: entered promiscuous mode [ 66.529030][ T5834] veth1_macvtap: entered promiscuous mode [ 66.552276][ T5831] Bluetooth: hci3: command tx timeout [ 66.555957][ T5835] veth1_vlan: entered promiscuous mode [ 66.557692][ T5827] Bluetooth: hci0: command tx timeout [ 66.563268][ T5836] Bluetooth: hci2: command tx timeout [ 66.574595][ T5840] Bluetooth: hci4: command tx timeout [ 66.600152][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.631297][ T5830] veth0_vlan: entered promiscuous mode [ 66.649829][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.665285][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.676799][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687122][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.699780][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728889][ T5830] veth1_vlan: entered promiscuous mode [ 66.739587][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.758125][ T5835] veth0_macvtap: entered promiscuous mode [ 66.767753][ T5835] veth1_macvtap: entered promiscuous mode [ 66.793106][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.816376][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.845152][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.854832][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.866421][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875433][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.914253][ T5830] veth0_macvtap: entered promiscuous mode [ 66.925444][ T5830] veth1_macvtap: entered promiscuous mode [ 66.950654][ T5823] veth0_vlan: entered promiscuous mode [ 66.961623][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.975486][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.998761][ T5826] veth0_vlan: entered promiscuous mode [ 67.025755][ T5823] veth1_vlan: entered promiscuous mode [ 67.051795][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.065060][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.067197][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.080406][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.083818][ T5826] veth1_vlan: entered promiscuous mode [ 67.108941][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.109611][ T30] audit: type=1400 audit(1753301129.152:87): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.qLUR0a/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.122500][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.155025][ T30] audit: type=1400 audit(1753301129.192:88): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.171380][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.177477][ T30] audit: type=1400 audit(1753301129.202:89): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.qLUR0a/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.216061][ T30] audit: type=1400 audit(1753301129.202:90): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.217067][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.238309][ T30] audit: type=1400 audit(1753301129.212:91): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.qLUR0a/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.238351][ T30] audit: type=1400 audit(1753301129.212:92): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.qLUR0a/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.313022][ T30] audit: type=1400 audit(1753301129.212:93): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.334103][ T30] audit: type=1400 audit(1753301129.352:94): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.362913][ T30] audit: type=1400 audit(1753301129.382:95): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="gadgetfs" ino=5805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.386336][ T30] audit: type=1400 audit(1753301129.382:96): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.423564][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.440012][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.449312][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.476714][ T5826] veth0_macvtap: entered promiscuous mode [ 67.528996][ T5826] veth1_macvtap: entered promiscuous mode [ 67.564733][ T5823] veth0_macvtap: entered promiscuous mode [ 67.600847][ T5823] veth1_macvtap: entered promiscuous mode [ 67.610742][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.613172][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.626119][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.634714][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.643212][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.665063][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.695449][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.714000][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.728385][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.739191][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.748423][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.761341][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.797389][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.807282][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.821851][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.831183][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.843004][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.852577][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.222558][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.231420][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.455454][ T5953] tipc: Can't bind to reserved service type 1 [ 68.780046][ T5827] Bluetooth: hci1: command tx timeout [ 68.786377][ T5831] Bluetooth: hci4: command tx timeout [ 68.786391][ T5836] Bluetooth: hci3: command tx timeout [ 68.792193][ T5831] Bluetooth: hci2: command tx timeout [ 68.799286][ T5840] Bluetooth: hci0: command tx timeout [ 68.827628][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.840954][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.854715][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.862640][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.247281][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.258832][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.907031][ T5840] Bluetooth: hci0: command tx timeout [ 70.912508][ T5827] Bluetooth: hci1: command tx timeout [ 70.917902][ T5827] Bluetooth: hci4: command tx timeout [ 70.923504][ T5840] Bluetooth: hci2: command tx timeout [ 70.928935][ T5836] Bluetooth: hci3: command tx timeout [ 70.935610][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.973173][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.892578][ T5994] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 72.232358][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 72.232378][ T30] audit: type=1400 audit(1753301133.472:137): avc: denied { map_create } for pid=5989 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.465920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.474507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.482976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.499740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 72.530287][ T30] audit: type=1400 audit(1753301133.472:138): avc: denied { map_read map_write } for pid=5989 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.551699][ T6000] input: syz0 as /devices/virtual/input/input5 [ 72.701442][ T30] audit: type=1400 audit(1753301133.482:139): avc: denied { perfmon } for pid=5989 comm="syz.0.13" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.722288][ T30] audit: type=1400 audit(1753301133.482:140): avc: denied { prog_run } for pid=5989 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.741084][ T30] audit: type=1400 audit(1753301133.492:141): avc: denied { read write } for pid=5989 comm="syz.0.13" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.343791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.478851][ T30] audit: type=1400 audit(1753301133.492:142): avc: denied { open } for pid=5989 comm="syz.0.13" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.499439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.547830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.680098][ T30] audit: type=1400 audit(1753301134.482:143): avc: denied { read write } for pid=5998 comm="syz.2.16" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.752308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.832379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.877794][ T30] audit: type=1400 audit(1753301134.482:144): avc: denied { open } for pid=5998 comm="syz.2.16" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.902449][ T30] audit: type=1400 audit(1753301134.492:145): avc: denied { shutdown } for pid=5999 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.922739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 74.742120][ T30] audit: type=1400 audit(1753301134.492:146): avc: denied { getopt } for pid=5999 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.991359][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 75.104656][ T6042] bridge_slave_1: left allmulticast mode [ 75.110381][ T6042] bridge_slave_1: left promiscuous mode [ 75.119195][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.131641][ T6042] bridge_slave_0: left allmulticast mode [ 75.137787][ T6042] bridge_slave_0: left promiscuous mode [ 75.143643][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.683337][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.952804][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 75.964693][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 76.005442][ T9] cfg80211: failed to load regulatory.db [ 78.074654][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.076872][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 78.166551][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 78.391104][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 78.391122][ T30] audit: type=1400 audit(1753301140.432:170): avc: denied { ioctl } for pid=6086 comm="syz.2.33" path="socket:[7649]" dev="sockfs" ino=7649 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.505269][ T30] audit: type=1400 audit(1753301140.522:171): avc: denied { create } for pid=6088 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.524588][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.623111][ T30] audit: type=1400 audit(1753301140.532:172): avc: denied { bind } for pid=6088 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.642248][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.730933][ T30] audit: type=1400 audit(1753301140.532:173): avc: denied { listen } for pid=6088 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.770307][ T30] audit: type=1400 audit(1753301140.532:174): avc: denied { connect } for pid=6088 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.830677][ T30] audit: type=1400 audit(1753301140.532:175): avc: denied { accept } for pid=6088 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.886175][ T30] audit: type=1400 audit(1753301140.532:176): avc: denied { read } for pid=6088 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.935668][ T30] audit: type=1400 audit(1753301140.592:177): avc: denied { write } for pid=6091 comm="syz.2.35" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.630545][ T30] audit: type=1400 audit(1753301140.872:178): avc: denied { ioctl } for pid=6097 comm="syz.2.37" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.674455][ T30] audit: type=1400 audit(1753301140.962:179): avc: denied { append } for pid=6100 comm="syz.3.38" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.162555][ T6125] syz.0.40: attempt to access beyond end of device [ 80.162555][ T6125] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 80.176239][ T6125] qnx6: unable to read the first superblock [ 80.183573][ T6125] syz.0.40: attempt to access beyond end of device [ 80.183573][ T6125] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 80.525802][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.527152][ T6125] qnx6: unable to read the first superblock [ 80.539316][ T6125] qnx6: unable to read the first superblock [ 80.550435][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 80.561411][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 82.124449][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.43'. [ 82.632053][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 82.638143][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 82.646180][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.784874][ T6204] capability: warning: `syz.2.44' uses deprecated v2 capabilities in a way that may be insecure [ 84.441415][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 84.441449][ T30] audit: type=1400 audit(1753301146.482:193): avc: denied { wake_alarm } for pid=6220 comm="syz.2.51" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.442064][ T6222] Zero length message leads to an empty skb [ 84.449199][ T30] audit: type=1400 audit(1753301146.482:194): avc: denied { write } for pid=6220 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.523207][ T30] audit: type=1400 audit(1753301146.522:195): avc: denied { create } for pid=6220 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.543845][ T30] audit: type=1400 audit(1753301146.522:196): avc: denied { getopt } for pid=6220 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.712408][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 84.712815][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 84.743910][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 85.263978][ T43] IPVS: starting estimator thread 0... [ 85.264249][ T30] audit: type=1400 audit(1753301147.292:197): avc: denied { create } for pid=6231 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.321936][ T30] audit: type=1400 audit(1753301147.292:198): avc: denied { write } for pid=6231 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.360203][ T30] audit: type=1400 audit(1753301147.302:199): avc: denied { create } for pid=6231 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.361977][ T6236] IPVS: using max 43 ests per chain, 103200 per kthread [ 85.429063][ T30] audit: type=1400 audit(1753301147.302:200): avc: denied { setopt } for pid=6231 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.508401][ T30] audit: type=1400 audit(1753301147.302:201): avc: denied { create } for pid=6231 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.566690][ T30] audit: type=1400 audit(1753301147.302:202): avc: denied { setopt } for pid=6231 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.102357][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.112168][ T974] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.272137][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 86.277628][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 86.287686][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.298869][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.309588][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.318757][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.327002][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.338024][ T974] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.348917][ T9] usb 2-1: config 0 descriptor?? [ 86.361556][ T9] hub 2-1:0.0: USB hub found [ 86.368185][ T974] usb 4-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 86.380747][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.388850][ T974] usb 4-1: Product: syz [ 86.393131][ T974] usb 4-1: Manufacturer: syz [ 86.397787][ T974] usb 4-1: SerialNumber: syz [ 86.406615][ T974] usb 4-1: config 0 descriptor?? [ 86.625968][ T9] hub 2-1:0.0: 1 port detected [ 86.652674][ T974] usb 4-1: USB disconnect, device number 2 [ 87.001065][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 87.008470][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 87.022410][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 87.028393][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 87.087501][ T9] usb 2-1: USB disconnect, device number 2 [ 87.206255][ T6271] ======================================================= [ 87.206255][ T6271] WARNING: The mand mount option has been deprecated and [ 87.206255][ T6271] and is ignored by this kernel. Remove the mand [ 87.206255][ T6271] option from the mount to silence this warning. [ 87.206255][ T6271] ======================================================= [ 87.241136][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.274871][ T6271] overlay: Unknown parameter '/' [ 87.365698][ T6272] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.965985][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 88.288766][ T9] usb 1-1: device descriptor read/64, error -71 [ 89.310785][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 89.817320][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.862034][ T9] usb 1-1: device descriptor read/64, error -71 [ 89.923766][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 89.923782][ T30] audit: type=1400 audit(1753301151.972:215): avc: denied { watch } for pid=6307 comm="syz.2.84" path="/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.974008][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.978200][ T9] usb usb1-port1: attempt power cycle [ 90.022187][ T30] audit: type=1400 audit(1753301151.972:216): avc: denied { watch_sb watch_reads } for pid=6307 comm="syz.2.84" path="/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.032530][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 90.067196][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.123040][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.144358][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.155946][ T43] usb 5-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 90.187033][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.217353][ T43] usb 5-1: Product: syz [ 90.229761][ T43] usb 5-1: Manufacturer: syz [ 90.256449][ T43] usb 5-1: SerialNumber: syz [ 90.276722][ T43] usb 5-1: config 0 descriptor?? [ 90.332363][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 90.352857][ T9] usb 1-1: device descriptor read/8, error -71 [ 90.833176][ T974] usb 5-1: USB disconnect, device number 2 [ 90.873261][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 91.125809][ T9] usb 1-1: device not accepting address 5, error -71 [ 91.175988][ T9] usb usb1-port1: unable to enumerate USB device [ 91.286434][ T6323] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 91.316447][ T6323] batman_adv: batadv0: Adding interface: gretap1 [ 91.326789][ T6323] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.352113][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.379835][ T6323] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 91.393896][ T30] audit: type=1400 audit(1753301153.442:217): avc: denied { read } for pid=6328 comm="syz.1.91" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.425596][ T6329] binder: BINDER_SET_CONTEXT_MGR already set [ 91.431765][ T6329] binder: 6328:6329 ioctl 4018620d 200000000040 returned -16 [ 91.535397][ T30] audit: type=1400 audit(1753301153.462:218): avc: denied { open } for pid=6328 comm="syz.1.91" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.574317][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 91.626613][ T30] audit: type=1400 audit(1753301153.472:219): avc: denied { ioctl } for pid=6328 comm="syz.1.91" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.704662][ T30] audit: type=1400 audit(1753301153.472:220): avc: denied { set_context_mgr } for pid=6328 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.724491][ T30] audit: type=1400 audit(1753301153.472:221): avc: denied { write } for pid=6328 comm="syz.1.91" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.797090][ T30] audit: type=1400 audit(1753301153.582:222): avc: denied { block_suspend } for pid=6332 comm="syz.3.93" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.954476][ T30] audit: type=1400 audit(1753301153.992:223): avc: denied { read } for pid=6344 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.034375][ T30] audit: type=1400 audit(1753301154.082:224): avc: denied { write } for pid=6344 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.160743][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 92.992944][ T974] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.302034][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 93.357706][ T974] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 93.410152][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.459191][ T974] usb 3-1: config 0 has no interface number 0 [ 93.505569][ T974] usb 3-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.601691][ T974] usb 3-1: config 0 interface 120 has no altsetting 0 [ 93.695088][ T974] usb 3-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 93.776201][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.862915][ T974] usb 3-1: Product: syz [ 93.911261][ T974] usb 3-1: Manufacturer: syz [ 93.990436][ T974] usb 3-1: SerialNumber: syz [ 94.110300][ T974] usb 3-1: config 0 descriptor?? [ 94.458018][ T974] usb 3-1: USB disconnect, device number 2 [ 94.508399][ T6367] syz.0.105 (6367): drop_caches: 2 [ 95.228199][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.120'. [ 95.841623][ T6418] sp0: Synchronizing with TNC [ 96.086787][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 96.086803][ T30] audit: type=1400 audit(1753301158.132:233): avc: denied { read } for pid=5495 comm="dhcpcd" name="n100" dev="tmpfs" ino=2449 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.188419][ T30] audit: type=1400 audit(1753301158.162:234): avc: denied { open } for pid=5495 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2449 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.215163][ T30] audit: type=1400 audit(1753301158.162:235): avc: denied { getattr } for pid=5495 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2449 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.303827][ T974] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.522160][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.622101][ T974] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.633309][ T974] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.643579][ T974] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.662130][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.891119][ T6439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.925501][ T974] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.068972][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 99.106825][ T5896] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 99.118416][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.138852][ T5896] usb 1-1: Product: syz [ 99.142284][ T6439] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 99.166285][ T974] usb 4-1: USB disconnect, device number 3 [ 99.179569][ T5896] usb 1-1: Manufacturer: syz [ 99.198367][ T5896] usb 1-1: SerialNumber: syz [ 99.225029][ T5896] usb 1-1: config 0 descriptor?? [ 99.236054][ T5896] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 100.047638][ T5896] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 100.058120][ T5896] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 100.309174][ T5896] usb 1-1: USB disconnect, device number 6 [ 100.851082][ T6477] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 100.874557][ T6477] netlink: 184 bytes leftover after parsing attributes in process `syz.2.143'. [ 101.107570][ T6477] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 101.703787][ T30] audit: type=1400 audit(1753301163.612:236): avc: denied { read write } for pid=6482 comm="syz.0.146" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.807962][ T30] audit: type=1400 audit(1753301163.612:237): avc: denied { open } for pid=6482 comm="syz.0.146" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 106.162347][ T5944] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.182027][ T30] audit: type=1400 audit(1753301167.342:238): avc: denied { create } for pid=6574 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.339371][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.402898][ T30] audit: type=1400 audit(1753301168.442:239): avc: denied { create } for pid=6578 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.404410][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.442155][ T5944] usb 2-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.00 [ 106.481396][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.520668][ T30] audit: type=1400 audit(1753301168.442:240): avc: denied { ioctl } for pid=6578 comm="syz.2.162" path="socket:[10689]" dev="sockfs" ino=10689 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.545896][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.555158][ T5944] usb 2-1: config 0 descriptor?? [ 106.588042][ T6415] Set syz1 is full, maxelem 65536 reached [ 106.762030][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 106.781816][ T9] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 106.791426][ T9] usb 4-1: config 0 has no interface number 0 [ 106.805595][ T9] usb 4-1: config 0 interface 112 altsetting 172 has an invalid descriptor for endpoint zero, skipping [ 107.189391][ T9] usb 4-1: config 0 interface 112 has no altsetting 0 [ 107.218337][ T5944] logitech-hidpp-device 0003:046D:C094.0001: item fetching failed at offset 5/7 [ 107.239997][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=4e.f3 [ 107.252553][ T5944] logitech-hidpp-device 0003:046D:C094.0001: hidpp_probe:parse failed [ 107.260867][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.292407][ T9] usb 4-1: Product: syz [ 107.296599][ T9] usb 4-1: Manufacturer: syz [ 107.308785][ T5944] logitech-hidpp-device 0003:046D:C094.0001: probe with driver logitech-hidpp-device failed with error -22 [ 107.331856][ T9] usb 4-1: SerialNumber: syz [ 107.349764][ T9] usb 4-1: config 0 descriptor?? [ 107.364940][ T9] igorplugusb 4-1:0.112: endpoint incorrect [ 107.379224][ T6593] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 107.667338][ T9] usb 4-1: USB disconnect, device number 4 [ 107.847569][ T5944] usb 2-1: USB disconnect, device number 3 [ 108.380133][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 108.410054][ T30] audit: type=1400 audit(1753301170.412:241): avc: denied { ioctl } for pid=6611 comm="syz.2.173" path="socket:[10719]" dev="sockfs" ino=10719 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.344856][ T30] audit: type=1400 audit(1753301171.292:242): avc: denied { ioctl } for pid=6620 comm="syz.0.175" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 110.188534][ T6628] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 110.292444][ T6628] netlink: 184 bytes leftover after parsing attributes in process `syz.3.177'. [ 110.311580][ T6628] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 110.474787][ T30] audit: type=1400 audit(1753301172.522:243): avc: denied { read write } for pid=6632 comm="syz.4.179" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.497824][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.650159][ T30] audit: type=1400 audit(1753301172.522:244): avc: denied { open } for pid=6632 comm="syz.4.179" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.679935][ T30] audit: type=1400 audit(1753301172.552:245): avc: denied { read append } for pid=6632 comm="syz.4.179" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.722008][ T30] audit: type=1400 audit(1753301172.552:246): avc: denied { open } for pid=6632 comm="syz.4.179" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.959775][ T6655] netlink: 32 bytes leftover after parsing attributes in process `syz.4.185'. [ 114.035078][ T30] audit: type=1400 audit(1753301176.052:247): avc: denied { mount } for pid=6670 comm="syz.1.191" name="/" dev="autofs" ino=9901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 114.326796][ T30] audit: type=1400 audit(1753301176.062:248): avc: denied { read } for pid=6670 comm="syz.1.191" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.364201][ T30] audit: type=1400 audit(1753301176.062:249): avc: denied { open } for pid=6670 comm="syz.1.191" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.424622][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.192'. [ 114.456033][ T30] audit: type=1400 audit(1753301176.072:250): avc: denied { ioctl } for pid=6670 comm="syz.1.191" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.480891][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.712023][ T30] audit: type=1400 audit(1753301176.462:251): avc: denied { bind } for pid=6675 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.887597][ T30] audit: type=1400 audit(1753301176.472:252): avc: denied { setopt } for pid=6675 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.908274][ T30] audit: type=1400 audit(1753301176.722:253): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 115.864580][ T30] audit: type=1400 audit(1753301177.892:254): avc: denied { write } for pid=6696 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.445899][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.603637][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.622886][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.648456][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.677892][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.690224][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.701652][ T9] usb 5-1: config 0 descriptor?? [ 116.930898][ T6721] ubi31: attaching mtd0 [ 116.937464][ T6721] ubi31: scanning is finished [ 116.942240][ T6721] ubi31: empty MTD device detected [ 117.556658][ T6721] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 117.679796][ T9] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 117.855672][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 117.952708][ T6736] 9pnet_virtio: no channels available for device syz [ 118.404658][ T9] usb 5-1: USB disconnect, device number 3 [ 118.538820][ T6740] fido_id[6740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 119.182017][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.534948][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.575670][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.600468][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.636751][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.647344][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.660434][ T6764] overlayfs: missing 'lowerdir' [ 119.661111][ T9] usb 3-1: config 0 descriptor?? [ 119.773337][ T6768] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.791045][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.845165][ T30] audit: type=1400 audit(1753301181.802:255): avc: denied { create } for pid=6761 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.151080][ T30] audit: type=1400 audit(1753301181.812:256): avc: denied { ioctl } for pid=6761 comm="syz.1.221" path="socket:[10139]" dev="sockfs" ino=10139 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.380173][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 120.410102][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 120.419449][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.430986][ T43] usb 5-1: Product: syz [ 120.444082][ T43] usb 5-1: Manufacturer: syz [ 120.448698][ T43] usb 5-1: SerialNumber: syz [ 120.459952][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.481398][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.482923][ T43] usb 5-1: config 0 descriptor?? [ 120.490023][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.506027][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.510857][ T43] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 120.515757][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.546324][ T6776] syzkaller0: entered promiscuous mode [ 120.571552][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.580537][ T6776] syzkaller0: entered allmulticast mode [ 120.588727][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.607515][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.615112][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.655086][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 120.815328][ T9] usb 3-1: USB disconnect, device number 3 [ 120.965755][ T43] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 121.024250][ T30] audit: type=1400 audit(1753301183.072:257): avc: denied { read } for pid=6787 comm="syz.1.228" path="socket:[11294]" dev="sockfs" ino=11294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.135180][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 121.163753][ T43] usb 5-1: USB disconnect, device number 4 [ 121.206100][ T30] audit: type=1400 audit(1753301183.252:258): avc: denied { create } for pid=6792 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.287281][ T30] audit: type=1400 audit(1753301183.332:259): avc: denied { watch watch_reads } for pid=6792 comm="syz.3.229" path="/51" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 121.384835][ T30] audit: type=1400 audit(1753301183.362:260): avc: denied { execute } for pid=6792 comm="syz.3.229" path="/51/file1" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.426828][ T30] audit: type=1400 audit(1753301183.462:261): avc: denied { setopt } for pid=6792 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.459241][ T30] audit: type=1400 audit(1753301183.462:262): avc: denied { bind } for pid=6792 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.772412][ T5944] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.932109][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 122.700689][ T5944] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.742188][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.768176][ T5944] usb 3-1: Product: syz [ 122.778275][ T5944] usb 3-1: Manufacturer: syz [ 122.792308][ T5944] usb 3-1: SerialNumber: syz [ 122.801346][ T9] IPVS: starting estimator thread 0... [ 122.809670][ T6802] tipc: Started in network mode [ 122.818151][ T5944] usb 3-1: config 0 descriptor?? [ 122.831986][ T6802] tipc: Node identity ac1414aa, cluster identity 4711 [ 122.843935][ T6802] tipc: Enabled bearer , priority 10 [ 122.892045][ T6804] IPVS: using max 45 ests per chain, 108000 per kthread [ 122.940298][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 123.152710][ T5944] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.189991][ T6815] ubi31: attaching mtd0 [ 123.195213][ T6815] ubi31: scanning is finished [ 123.239460][ T6815] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 123.247139][ T6815] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 123.254605][ T6815] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 123.261694][ T6815] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 123.269263][ T6815] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 123.276142][ T6815] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 123.284225][ T6815] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1159133296 [ 123.294326][ T6815] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 123.313138][ T6817] ubi31: background thread "ubi_bgt31d" started, PID 6817 [ 123.972719][ T24] tipc: Node number set to 2886997162 [ 124.777137][ T6831] dvmrp8: entered allmulticast mode [ 125.147904][ T5944] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 125.160955][ T5944] usb 3-1: USB disconnect, device number 4 [ 125.188361][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.466076][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.480368][ T30] audit: type=1400 audit(1753301187.522:263): avc: denied { write } for pid=6840 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.484591][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.517080][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 125.526686][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.693367][ T24] usb 4-1: config 0 descriptor?? [ 126.494520][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 126.510539][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 126.572000][ T974] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.573599][ T24] usb 4-1: USB disconnect, device number 5 [ 126.855710][ T974] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.864343][ T974] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.881722][ T974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.223945][ T974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 127.240221][ T974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 127.273740][ T974] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.283150][ T974] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.291216][ T974] usb 3-1: Product: syz [ 127.300659][ T974] usb 3-1: Manufacturer: syz [ 127.310105][ T974] cdc_wdm 3-1:1.0: skipping garbage [ 127.323825][ T974] cdc_wdm 3-1:1.0: skipping garbage [ 127.342903][ T974] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 127.348824][ T974] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.606198][ T30] audit: type=1400 audit(1753301189.652:264): avc: denied { read write } for pid=6856 comm="syz.2.252" name="cdc-wdm0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 127.815471][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 127.836135][ T30] audit: type=1400 audit(1753301189.682:265): avc: denied { open } for pid=6856 comm="syz.2.252" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 127.888720][ T30] audit: type=1400 audit(1753301189.862:266): avc: denied { ioctl } for pid=6856 comm="syz.2.252" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.978156][ T30] audit: type=1400 audit(1753301190.022:267): avc: denied { map } for pid=6877 comm="syz.3.258" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.127322][ T30] audit: type=1400 audit(1753301190.152:268): avc: denied { create } for pid=6885 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.510277][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 129.510387][ T5944] usb 3-1: USB disconnect, device number 5 [ 129.516906][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 129.516927][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 130.028719][ T6904] wg1 speed is unknown, defaulting to 1000 [ 130.035125][ T30] audit: type=1400 audit(1753301192.072:269): avc: denied { create } for pid=6895 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.065684][ T6904] wg1 speed is unknown, defaulting to 1000 [ 130.074743][ T6904] wg1 speed is unknown, defaulting to 1000 [ 130.234121][ T30] audit: type=1400 audit(1753301192.072:270): avc: denied { write } for pid=6895 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.664776][ T30] audit: type=1400 audit(1753301192.712:271): avc: denied { read write } for pid=6907 comm="syz.1.268" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.694372][ T974] wg1 speed is unknown, defaulting to 1000 [ 130.700832][ T6904] infiniband syz0: set active [ 130.716227][ T6904] infiniband syz0: added wg1 [ 130.739533][ T6904] syz0: rxe_create_cq: returned err = -12 [ 130.765805][ T6904] infiniband syz0: Couldn't create ib_mad CQ [ 130.786264][ T6904] infiniband syz0: Couldn't open port 1 [ 130.799563][ T30] audit: type=1400 audit(1753301192.712:272): avc: denied { open } for pid=6907 comm="syz.1.268" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.912164][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.976926][ T6904] RDS/IB: syz0: added [ 131.001037][ T6904] smc: adding ib device syz0 with port count 1 [ 131.031319][ T6904] smc: ib device syz0 port 1 has pnetid [ 131.047201][ T5944] wg1 speed is unknown, defaulting to 1000 [ 131.055618][ T6904] wg1 speed is unknown, defaulting to 1000 [ 131.064056][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.084170][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.122041][ T5896] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 131.181197][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.223908][ T5896] usb 2-1: config 0 descriptor?? [ 131.498562][ T6919] 9pnet_virtio: no channels available for device syz [ 131.881280][ T6904] wg1 speed is unknown, defaulting to 1000 [ 132.050380][ T6904] wg1 speed is unknown, defaulting to 1000 [ 132.262877][ T5896] usbhid 2-1:0.0: can't add hid device: -32 [ 132.279167][ T5896] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 132.325233][ T5896] usb 2-1: USB disconnect, device number 4 [ 132.338803][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.348648][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.281306][ T6904] wg1 speed is unknown, defaulting to 1000 [ 133.942455][ T30] audit: type=1400 audit(1753301195.812:273): avc: denied { connect } for pid=6933 comm="syz.4.278" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.744336][ T6904] wg1 speed is unknown, defaulting to 1000 [ 136.219255][ T30] audit: type=1326 audit(1753301198.262:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2198e9a9 code=0x7ffc0000 [ 136.467023][ T30] audit: type=1326 audit(1753301198.262:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2198e9a9 code=0x7ffc0000 [ 136.493659][ T30] audit: type=1326 audit(1753301198.292:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5f2198e9a9 code=0x7ffc0000 [ 136.522026][ T30] audit: type=1326 audit(1753301198.292:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2198e9a9 code=0x7ffc0000 [ 136.597819][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.605711][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.613414][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.621079][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.628772][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.636473][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.644164][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.651952][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.659676][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.667419][ T6974] netlink: 'syz.2.288': attribute type 3 has an invalid length. [ 136.919493][ T30] audit: type=1326 audit(1753301198.292:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2198e9a9 code=0x7ffc0000 [ 137.121112][ T30] audit: type=1400 audit(1753301198.302:279): avc: denied { watch_sb watch_reads } for pid=6943 comm="syz.4.283" path="/50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.198375][ T30] audit: type=1400 audit(1753301198.302:280): avc: denied { append } for pid=6943 comm="syz.4.283" name="v4l-subdev1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.271363][ T30] audit: type=1400 audit(1753301198.572:281): avc: denied { setopt } for pid=6972 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.690072][ T6991] syz.0.293: attempt to access beyond end of device [ 137.690072][ T6991] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 137.703033][ T6991] qnx6: unable to read the first superblock [ 137.709930][ T6991] syz.0.293: attempt to access beyond end of device [ 137.709930][ T6991] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 137.722758][ T6991] qnx6: unable to read the first superblock [ 137.728674][ T6991] qnx6: unable to read the first superblock [ 138.102165][ T974] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 138.127598][ T6989] netlink: 184 bytes leftover after parsing attributes in process `syz.2.295'. [ 138.313404][ T974] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 138.321442][ T974] usb 4-1: config 6 has no interface number 0 [ 138.403795][ T974] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 138.449910][ T974] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.522029][ T5896] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.535929][ T974] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 138.602580][ T974] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.027250][ T974] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 139.055318][ T974] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 139.080916][ T974] usb 4-1: Product: syz [ 139.094319][ T974] usb 4-1: Manufacturer: syz [ 139.109607][ T974] usb 4-1: SerialNumber: syz [ 139.373059][ T7000] syz.1.298 (7000): drop_caches: 2 [ 139.404600][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 139.415686][ T974] hso 4-1:6.2: Failed to find BULK IN ep [ 139.421006][ T5896] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 139.440224][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.562584][ T5896] usb 3-1: config 0 descriptor?? [ 139.639539][ T6980] syz.3.294: attempt to access beyond end of device [ 139.639539][ T6980] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 139.648271][ T5896] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 139.658142][ T6980] gfs2: error -5 reading superblock [ 139.782438][ T7010] xt_l2tp: v2 doesn't support IP mode [ 140.014775][ T5895] usb 4-1: USB disconnect, device number 6 [ 140.038486][ T30] audit: type=1400 audit(1753301202.082:282): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.118 dest=45586 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 140.974446][ T5895] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.331169][ T7032] binder: 7031:7032 ioctl c0306201 2000000001c0 returned -22 [ 141.424316][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.445562][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.456239][ T5895] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 141.465445][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.476950][ T5895] usb 5-1: config 0 descriptor?? [ 141.483635][ T5896] gspca_nw80x: reg_w err -71 [ 141.488333][ T5896] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 141.507037][ T5896] usb 3-1: USB disconnect, device number 6 [ 141.946780][ T5895] cp2112 0003:10C4:EA90.0004: item fetching failed at offset 5/7 [ 141.956714][ T5895] cp2112 0003:10C4:EA90.0004: parse failed [ 141.962798][ T5895] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -22 [ 144.222288][ T7065] validate_nla: 45 callbacks suppressed [ 144.222303][ T7065] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 144.257714][ T974] usb 5-1: USB disconnect, device number 5 [ 144.276825][ T7065] netlink: 144 bytes leftover after parsing attributes in process `syz.2.320'. [ 144.302076][ T7065] netlink: 36 bytes leftover after parsing attributes in process `syz.2.320'. [ 144.681174][ T5895] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 145.043240][ T5895] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 145.064589][ T5895] usb 4-1: config 6 has no interface number 0 [ 145.071026][ T5895] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 145.083997][ T5895] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.096362][ T5895] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.623344][ T5895] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.812616][ T5895] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 145.924623][ T7092] tipc: Started in network mode [ 145.929583][ T7092] tipc: Node identity 92a6742604bd, cluster identity 4711 [ 145.938081][ T5895] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 145.947063][ T5895] usb 4-1: Product: syz [ 145.951229][ T5895] usb 4-1: Manufacturer: syz [ 145.959536][ T5895] usb 4-1: SerialNumber: syz [ 145.969600][ T5895] hso 4-1:6.2: Failed to find BULK IN ep [ 145.992648][ T7092] tipc: Enabled bearer , priority 0 [ 146.023105][ T7092] syzkaller0: entered promiscuous mode [ 146.034999][ T7092] syzkaller0: entered allmulticast mode [ 146.127820][ T7091] tipc: Resetting bearer [ 146.291757][ T7102] syz.3.321: attempt to access beyond end of device [ 146.291757][ T7102] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 146.305123][ T7102] gfs2: error -5 reading superblock [ 146.358167][ T7102] xt_l2tp: v2 doesn't support IP mode [ 146.408710][ T7091] tipc: Disabling bearer [ 147.144687][ T974] usb 4-1: USB disconnect, device number 7 [ 147.924059][ T7128] vlan1: entered promiscuous mode [ 147.929293][ T7128] vlan1: entered allmulticast mode [ 147.934483][ T7128] veth0_vlan: entered allmulticast mode [ 148.526681][ T30] audit: type=1400 audit(1753301210.552:283): avc: denied { create } for pid=7121 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.579777][ T30] audit: type=1400 audit(1753301210.552:284): avc: denied { connect } for pid=7121 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.602922][ T30] audit: type=1400 audit(1753301210.562:285): avc: denied { write } for pid=7121 comm="syz.2.339" path="socket:[12223]" dev="sockfs" ino=12223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 149.316989][ T30] audit: type=1400 audit(1753301211.362:286): avc: denied { read } for pid=7138 comm="syz.4.344" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.350228][ T7144] program syz.4.344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.727810][ T30] audit: type=1400 audit(1753301211.772:287): avc: denied { read } for pid=7140 comm="syz.0.345" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 149.872051][ T30] audit: type=1400 audit(1753301211.772:288): avc: denied { open } for pid=7140 comm="syz.0.345" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 150.091643][ T7152] netlink: 'syz.2.347': attribute type 1 has an invalid length. [ 150.132478][ T7152] netlink: 144 bytes leftover after parsing attributes in process `syz.2.347'. [ 150.154750][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 150.486558][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.662177][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 150.717404][ T5895] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 150.865190][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.904402][ T5895] pvrusb2: Hardware description: Terratec Grabster AV400 [ 150.928014][ T5895] pvrusb2: ********** [ 150.948619][ T5895] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 150.979624][ T30] audit: type=1400 audit(1753301213.022:289): avc: denied { mounton } for pid=7169 comm="syz.1.354" path="/76/file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.020326][ T5895] pvrusb2: Important functionality might not be entirely working. [ 151.040363][ T5895] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 151.048084][ T30] audit: type=1400 audit(1753301213.062:290): avc: denied { setattr } for pid=7169 comm="syz.1.354" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.113540][ T5895] pvrusb2: ********** [ 151.120871][ T2325] pvrusb2: Invalid write control endpoint [ 151.188786][ T30] audit: type=1400 audit(1753301213.062:291): avc: denied { write } for pid=7169 comm="syz.1.354" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.269359][ T30] audit: type=1400 audit(1753301213.062:292): avc: denied { open } for pid=7169 comm="syz.1.354" path="/76/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.366533][ T7160] pvrusb2: Invalid write control endpoint [ 151.947235][ T2325] pvrusb2: Invalid write control endpoint [ 151.957291][ T5895] usb 1-1: USB disconnect, device number 7 [ 151.968090][ T2325] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 151.982627][ T2325] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 151.991077][ T2325] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 152.002158][ T2325] pvrusb2: Device being rendered inoperable [ 152.009771][ T2325] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 152.017646][ T2325] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 152.029812][ T2325] pvrusb2: Attached sub-driver cx25840 [ 152.038523][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 152.057091][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 152.128178][ T7187] tipc: Enabling of bearer rejected, already enabled [ 152.997416][ T7208] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.625076][ T7228] tipc: Enabled bearer , priority 10 [ 154.852766][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 154.852788][ T30] audit: type=1400 audit(1753301216.892:295): avc: denied { create } for pid=7232 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 155.319643][ T30] audit: type=1400 audit(1753301216.932:296): avc: denied { setopt } for pid=7232 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.562530][ T30] audit: type=1400 audit(1753301216.932:297): avc: denied { accept } for pid=7232 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.627885][ T7237] tipc: Started in network mode [ 155.753656][ T974] tipc: Node number set to 2518381606 [ 155.765131][ T7237] tipc: Node identity 0e53cad7242b, cluster identity 4711 [ 155.829314][ T7237] tipc: Enabled bearer , priority 0 [ 155.865407][ T30] audit: type=1400 audit(1753301216.942:298): avc: denied { write } for pid=7232 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.962742][ T7239] syzkaller0: entered promiscuous mode [ 156.015234][ T7239] syzkaller0: entered allmulticast mode [ 156.032491][ T7237] tipc: Resetting bearer [ 156.095918][ T7235] tipc: Resetting bearer [ 156.147743][ T7235] tipc: Disabling bearer [ 156.153942][ T5948] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.319079][ T5948] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.381674][ T5948] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 156.535142][ T5948] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.647936][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.853430][ T7240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 157.025611][ T5948] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.140417][ T7240] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 157.218960][ T5948] usb 2-1: USB disconnect, device number 5 [ 157.314249][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.467905][ T7267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.383'. [ 157.933343][ T7273] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.974640][ T30] audit: type=1400 audit(1753301220.012:299): avc: denied { ioctl } for pid=7272 comm="syz.3.388" path="socket:[14434]" dev="sockfs" ino=14434 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.821763][ T30] audit: type=1400 audit(1753301220.152:300): avc: denied { getopt } for pid=7272 comm="syz.3.388" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.842584][ T30] audit: type=1800 audit(1753301220.162:301): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.388" name="bus" dev="overlay" ino=436 res=0 errno=0 [ 158.954513][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 158.967471][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 159.101829][ T7285] ceph: No mds server is up or the cluster is laggy [ 159.273600][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 159.360531][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 161.792819][ T30] audit: type=1400 audit(1753301223.762:302): avc: denied { read } for pid=7314 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.511900][ T7333] ubi: mtd0 is already attached to ubi31 [ 163.151086][ T7351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.414'. [ 163.262999][ T974] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.452001][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 163.460662][ T974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 164.128314][ T30] audit: type=1800 audit(1753301225.642:303): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.418" name="bus" dev="overlay" ino=415 res=0 errno=0 [ 164.434323][ T974] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 164.473152][ T974] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 164.496688][ T974] usb 5-1: Product: syz [ 164.527616][ T974] usb 5-1: Manufacturer: syz [ 164.553900][ T974] usb 5-1: SerialNumber: syz [ 164.582968][ T974] usb 5-1: config 0 descriptor?? [ 164.591453][ T974] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 166.484428][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 166.750922][ T974] gspca_zc3xx: reg_w_i err -71 [ 167.014166][ T5896] usb 4-1: device descriptor read/64, error -71 [ 167.251991][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.438571][ T974] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 167.476760][ T974] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 167.502073][ T5896] usb 4-1: device descriptor read/64, error -71 [ 167.507976][ T974] usb 5-1: USB disconnect, device number 6 [ 167.837919][ T30] audit: type=1400 audit(1753301229.882:304): avc: denied { bind } for pid=7416 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.908622][ T5896] usb usb4-port1: attempt power cycle [ 168.548452][ T30] audit: type=1400 audit(1753301229.902:305): avc: denied { ioctl } for pid=7416 comm="syz.1.438" path="socket:[13762]" dev="sockfs" ino=13762 ioctlcmd=0x52c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.573416][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.991999][ T5896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.080107][ T5896] usb 4-1: device descriptor read/8, error -71 [ 169.852281][ T30] audit: type=1400 audit(1753301231.892:306): avc: denied { accept } for pid=7440 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 171.339671][ T7466] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 171.475666][ T7466] netlink: 176 bytes leftover after parsing attributes in process `syz.0.452'. [ 171.505139][ T7466] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 171.882185][ T7015] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.969279][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 172.122065][ T7015] usb 1-1: device descriptor read/64, error -71 [ 172.342157][ T974] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.362008][ T7015] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.493538][ T974] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.502925][ T7015] usb 1-1: device descriptor read/64, error -71 [ 172.587994][ T974] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.599558][ T974] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.609035][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.623476][ T7015] usb usb1-port1: attempt power cycle [ 172.638271][ T7488] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.716074][ T974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.927316][ T7488] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 172.942843][ T974] usb 2-1: USB disconnect, device number 6 [ 173.452985][ T7015] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.504011][ T7015] usb 1-1: device descriptor read/8, error -71 [ 173.752345][ T7015] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.394343][ T7015] usb 1-1: device descriptor read/8, error -71 [ 174.513565][ T7015] usb usb1-port1: unable to enumerate USB device [ 174.853020][ T30] audit: type=1400 audit(1753301236.892:307): avc: denied { bind } for pid=7512 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.875411][ T30] audit: type=1400 audit(1753301236.922:308): avc: denied { connect } for pid=7512 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.333894][ T30] audit: type=1400 audit(1753301236.922:309): avc: denied { ioctl } for pid=7512 comm="syz.3.472" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.734879][ T5896] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 175.904067][ T5896] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 175.915849][ T5896] usb 1-1: config 0 has no interface number 0 [ 175.942589][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.946839][ T5896] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 175.975618][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.003988][ T5896] usb 1-1: Product: syz [ 176.010754][ T5896] usb 1-1: Manufacturer: syz [ 176.016087][ T5896] usb 1-1: SerialNumber: syz [ 176.024481][ T5896] usb 1-1: config 0 descriptor?? [ 176.031454][ T5896] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 176.045738][ T5896] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 176.116200][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.128332][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.139544][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 176.151151][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.172729][ T9] usb 4-1: config 0 descriptor?? [ 176.232024][ T974] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.254231][ T30] audit: type=1400 audit(1753301238.302:310): avc: denied { create } for pid=7523 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 176.263382][ T5896] usb 1-1: USB disconnect, device number 12 [ 176.838181][ T974] usb 3-1: device descriptor read/64, error -71 [ 176.848125][ T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 176.860290][ T9] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 177.212585][ T974] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 177.227313][ T9] cp2112 0003:10C4:EA90.0005: error requesting version [ 177.519802][ T7564] No control pipe specified [ 177.758487][ T9] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -32 [ 177.812170][ T974] usb 3-1: device descriptor read/64, error -71 [ 177.944415][ T974] usb usb3-port1: attempt power cycle [ 178.101599][ T30] audit: type=1800 audit(1753301240.142:311): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.490" name="bus" dev="overlay" ino=490 res=0 errno=0 [ 178.188580][ T30] audit: type=1400 audit(1753301240.172:312): avc: denied { create } for pid=7573 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.208116][ T30] audit: type=1400 audit(1753301240.172:313): avc: denied { connect } for pid=7573 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.335363][ T30] audit: type=1400 audit(1753301240.312:314): avc: denied { write } for pid=7573 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.616248][ T974] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 179.068204][ T974] usb 3-1: device descriptor read/8, error -71 [ 179.098640][ T5896] usb 4-1: USB disconnect, device number 12 [ 179.186262][ T7582] input: syz1 as /devices/virtual/input/input7 [ 179.387024][ T30] audit: type=1400 audit(1753301241.432:315): avc: denied { ioctl } for pid=5185 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2906 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.411904][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.849191][ T7584] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 180.899361][ T7584] VFS: Can't find a romfs filesystem on dev nullb0. [ 180.899361][ T7584] [ 182.060081][ T7605] No control pipe specified [ 182.642241][ T7015] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 183.152036][ T7015] usb 3-1: device descriptor read/64, error -71 [ 183.505456][ T7015] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 183.642009][ T7015] usb 3-1: device descriptor read/64, error -71 [ 183.693887][ T7637] Cannot find del_set index 0 as target [ 184.359195][ T30] audit: type=1400 audit(1753301246.392:316): avc: denied { bind } for pid=7636 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.647344][ T7015] usb usb3-port1: attempt power cycle [ 184.657919][ T30] audit: type=1400 audit(1753301246.532:317): avc: denied { accept } for pid=7636 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.686854][ T30] audit: type=1400 audit(1753301246.622:318): avc: denied { listen } for pid=7636 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.851579][ T974] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.002209][ T7015] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 185.102421][ T7015] usb 3-1: device descriptor read/8, error -71 [ 185.192071][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 185.198721][ T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.209430][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.221497][ T974] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 185.235817][ T974] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 185.245391][ T974] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 185.253648][ T974] usb 2-1: Manufacturer: syz [ 185.259874][ T974] usb 2-1: config 0 descriptor?? [ 185.352953][ T7015] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 185.374802][ T7015] usb 3-1: device descriptor read/8, error -71 [ 185.422051][ T5944] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.493068][ T7015] usb usb3-port1: unable to enumerate USB device [ 185.516331][ T974] usb 2-1: USB disconnect, device number 7 [ 185.583670][ T5944] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 185.591874][ T5944] usb 4-1: config 0 has no interface number 0 [ 185.600438][ T5944] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 185.609584][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.619338][ T5944] usb 4-1: config 0 descriptor?? [ 185.627787][ T5944] ttusbir 4-1:0.83: cannot find expected altsetting [ 185.813329][ T7015] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 185.828805][ T5896] usb 4-1: USB disconnect, device number 13 [ 185.973466][ T7015] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 185.981523][ T7015] usb 3-1: config 6 has no interface number 0 [ 185.989167][ T7015] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 185.998923][ T7015] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.021438][ T7015] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.036906][ T7015] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.054900][ T7015] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 186.121357][ T7015] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 186.181970][ T7015] usb 3-1: Product: syz [ 186.186170][ T7015] usb 3-1: Manufacturer: syz [ 186.191154][ T7015] usb 3-1: SerialNumber: syz [ 186.229840][ T7015] hso 3-1:6.2: Failed to find BULK IN ep [ 186.956895][ T7665] xt_l2tp: v2 doesn't support IP mode [ 187.120901][ T43] usb 3-1: USB disconnect, device number 15 [ 187.362146][ T5944] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.912161][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 187.962341][ T5944] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 188.001142][ T5944] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 188.030427][ T5944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 188.082005][ T5944] usb 5-1: config 1 has no interface number 0 [ 188.107785][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 188.148635][ T5944] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.163840][ T5944] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 188.179026][ T5944] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 188.203530][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.226279][ T5944] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 188.431446][ T5944] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 188.442058][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 188.767165][ T5896] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 188.775564][ T5896] usb 1-1: config 0 has no interface number 0 [ 188.783764][ T5896] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 188.793265][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.801385][ T5896] usb 1-1: Product: syz [ 188.806393][ T5896] usb 1-1: Manufacturer: syz [ 188.810997][ T5896] usb 1-1: SerialNumber: syz [ 188.819995][ T5896] usb 1-1: config 0 descriptor?? [ 188.829554][ T5896] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 188.840423][ T5896] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 188.847979][ T10] usb 5-1: USB disconnect, device number 7 [ 188.881035][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 188.952643][ T30] audit: type=1400 audit(1753301250.962:319): avc: denied { ioctl } for pid=7707 comm="syz.3.535" path="socket:[15659]" dev="sockfs" ino=15659 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.255485][ T5896] usb 1-1: USB disconnect, device number 13 [ 189.294743][ T30] audit: type=1400 audit(1753301250.962:320): avc: denied { ioctl } for pid=7707 comm="syz.3.535" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.335805][ T30] audit: type=1400 audit(1753301250.972:321): avc: denied { mount } for pid=7707 comm="syz.3.535" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 189.582315][ T30] audit: type=1400 audit(1753301251.622:322): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.733756][ T30] audit: type=1400 audit(1753301252.702:323): avc: denied { create } for pid=7732 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.509441][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 191.818938][ T7015] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 192.024543][ T7015] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 192.035012][ T7015] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 192.065071][ T7015] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 192.083360][ T7015] usb 3-1: config 0 has no interface number 0 [ 192.103815][ T7015] usb 3-1: config 0 has no interface number 1 [ 192.138575][ T7015] usb 3-1: config 0 interface 166 altsetting 0 endpoint 0x4 has invalid maxpacket 935, setting to 64 [ 192.172227][ T7015] usb 3-1: too many endpoints for config 0 interface 183 altsetting 165: 162, using maximum allowed: 30 [ 192.178481][ T30] audit: type=1400 audit(1753301254.212:324): avc: denied { setopt } for pid=7752 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 192.185876][ T7015] usb 3-1: config 0 interface 183 altsetting 165 has 0 endpoint descriptors, different from the interface descriptor's value: 162 [ 192.216856][ T7015] usb 3-1: config 0 interface 183 has no altsetting 0 [ 192.301633][ T7015] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=57.10 [ 192.352561][ T7015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.380176][ T7015] usb 3-1: config 0 descriptor?? [ 192.912066][ T7015] usb 3-1: string descriptor 0 read error: -71 [ 192.955309][ T7015] usb 3-1: USB disconnect, device number 16 [ 193.766698][ T30] audit: type=1400 audit(1753301255.812:325): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 193.847863][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.855675][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.742425][ T7780] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 194.850153][ T30] audit: type=1400 audit(1753301255.812:326): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 194.882696][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.847669][ T30] audit: type=1400 audit(1753301258.892:327): avc: denied { bind } for pid=7821 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.922367][ T30] audit: type=1400 audit(1753301258.912:328): avc: denied { write } for pid=7821 comm="syz.1.569" path="socket:[15326]" dev="sockfs" ino=15326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.442058][ T5944] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.332075][ T30] audit: type=1800 audit(1753301259.632:329): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.572" name="bus" dev="overlay" ino=599 res=0 errno=0 [ 198.436035][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 198.482708][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 198.497201][ T5944] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 198.512115][ T5944] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 198.521440][ T7835] tipc: Started in network mode [ 198.536571][ T7835] tipc: Node identity 0a3c50078469, cluster identity 4711 [ 198.543753][ T5944] usb 5-1: Product: syz [ 198.550784][ T5944] usb 5-1: Manufacturer: syz [ 198.567144][ T7835] tipc: Enabled bearer , priority 0 [ 198.571234][ T5944] usb 5-1: SerialNumber: syz [ 198.610969][ T7840] syzkaller0: entered promiscuous mode [ 198.617827][ T7839] input: syz1 as /devices/virtual/input/input9 [ 198.633307][ T5944] usb 5-1: config 0 descriptor?? [ 198.658248][ T5944] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 198.780079][ T7840] syzkaller0: entered allmulticast mode [ 199.012519][ T7840] tipc: Resetting bearer [ 199.068375][ T7834] tipc: Resetting bearer [ 199.269117][ T7834] tipc: Disabling bearer [ 200.066510][ T30] audit: type=1800 audit(1753301262.092:330): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.583" name="bus" dev="overlay" ino=628 res=0 errno=0 [ 200.208750][ T5944] gspca_zc3xx: reg_w_i err -71 [ 200.997434][ T5944] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 201.020822][ T5944] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 201.282159][ T5944] usb 5-1: USB disconnect, device number 8 [ 202.152002][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 202.313788][ T30] audit: type=1400 audit(1753301264.362:331): avc: denied { accept } for pid=7857 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 202.399897][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.417302][ T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.436346][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.449707][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.523795][ T5944] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.610479][ T7881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.639648][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.772271][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 202.781590][ T5944] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 202.792437][ T5944] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 202.803954][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.978026][ T7881] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 203.062310][ T5895] usb 1-1: USB disconnect, device number 14 [ 203.247560][ T30] audit: type=1800 audit(1753301265.292:332): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.596" name="bus" dev="overlay" ino=664 res=0 errno=0 [ 204.009180][ T5944] usb 2-1: Product: syz [ 204.013975][ T5944] usb 2-1: Manufacturer: syz [ 204.049913][ T5944] usb 2-1: SerialNumber: syz [ 204.196934][ T5944] usb 2-1: config 0 descriptor?? [ 204.384007][ T5944] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 204.396812][ T5944] usb 2-1: setting power ON [ 204.401686][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 204.457790][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.467826][ T5944] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 204.479141][ T5944] usb 2-1: media controller created [ 204.517396][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.517887][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 204.548677][ T5944] usb 2-1: selecting invalid altsetting 6 [ 204.559825][ T5944] usb 2-1: digital interface selection failed (-22) [ 204.568789][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 204.577681][ T5944] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 204.588213][ T7893] dvb-usb: bulk message failed: -22 (3/0) [ 204.594146][ T7893] dvb-usb: bulk message failed: -22 (7/0) [ 204.602832][ T5944] usb 2-1: setting power OFF [ 204.608268][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 204.615104][ T5944] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 204.648140][ T5944] (NULL device *): no alternate interface [ 204.742698][ T5944] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 204.810596][ T5944] usb 2-1: USB disconnect, device number 8 [ 205.739173][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'. [ 206.044579][ T7947] tipc: Enabled bearer , priority 0 [ 206.078872][ T7947] syzkaller0: entered promiscuous mode [ 206.096842][ T7947] syzkaller0: entered allmulticast mode [ 206.133100][ T7947] tipc: Resetting bearer [ 206.155907][ T7946] tipc: Resetting bearer [ 206.192152][ T7946] tipc: Disabling bearer [ 206.524431][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.617'. [ 206.637599][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 206.713149][ T7971] Bluetooth: MGMT ver 1.23 [ 206.725157][ T30] audit: type=1400 audit(1753301268.752:333): avc: denied { write } for pid=7959 comm="syz.1.615" path="socket:[16910]" dev="sockfs" ino=16910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.563123][ T7984] input: syz1 as /devices/virtual/input/input10 [ 208.185675][ T7989] tipc: Enabled bearer , priority 0 [ 208.204033][ T7989] syzkaller0: entered promiscuous mode [ 208.254317][ T7989] syzkaller0: entered allmulticast mode [ 208.287621][ T7989] tipc: Resetting bearer [ 208.316096][ T7987] tipc: Resetting bearer [ 208.343703][ T7987] tipc: Disabling bearer [ 210.452051][ T30] audit: type=1400 audit(1753301272.492:334): avc: denied { map } for pid=8018 comm="syz.3.634" path="socket:[16973]" dev="sockfs" ino=16973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 211.366186][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 214.307089][ T8076] wg1 speed is unknown, defaulting to 1000 [ 214.395254][ T30] audit: type=1400 audit(1753301276.432:335): avc: denied { create } for pid=8073 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.405168][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 215.392178][ T30] audit: type=1400 audit(1753301277.362:336): avc: denied { setopt } for pid=8087 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.964967][ T974] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 216.170012][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.609761][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.868684][ T974] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 216.991980][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.039133][ T974] usb 2-1: config 0 descriptor?? [ 217.615141][ T974] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 217.641198][ T974] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 217.829671][ T974] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 218.042479][ T974] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 218.094190][ T974] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -32 [ 219.413022][ T30] audit: type=1400 audit(1753301281.453:337): avc: denied { create } for pid=8146 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 219.512048][ T30] audit: type=1400 audit(1753301281.523:338): avc: denied { setopt } for pid=8146 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 219.547055][ T5828] usb 2-1: USB disconnect, device number 9 [ 222.413570][ T8188] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 223.188122][ T8188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.211289][ T8201] ubi: mtd0 is already attached to ubi31 [ 223.257347][ T8197] ip6tnl1: entered allmulticast mode [ 223.440295][ T8197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.450579][ T8197] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 223.488772][ T8197] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 223.844394][ T8204] tipc: Enabled bearer , priority 0 [ 223.875033][ T30] audit: type=1400 audit(1753301285.913:339): avc: denied { sys_module } for pid=8195 comm="syz.1.695" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 223.901351][ T8200] tipc: Resetting bearer [ 224.005979][ T8205] syzkaller0: entered promiscuous mode [ 224.011714][ T8205] syzkaller0: entered allmulticast mode [ 224.238328][ T8195] tipc: Resetting bearer [ 224.264863][ T8195] tipc: Disabling bearer [ 224.488261][ T8226] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 224.497958][ T8226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.700'. [ 226.162205][ T30] audit: type=1400 audit(1753301288.213:340): avc: denied { getopt } for pid=8245 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.563376][ T8250] No buffer was provided with the request [ 226.741060][ T30] audit: type=1400 audit(1753301288.783:341): avc: denied { bind } for pid=8252 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.785131][ T8264] mmap: syz.0.711 (8264) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.849938][ T30] audit: type=1400 audit(1753301288.783:342): avc: denied { write } for pid=8252 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.927549][ T8266] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 226.936875][ T30] audit: type=1400 audit(1753301288.833:343): avc: denied { setopt } for pid=8252 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.989796][ T8266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.713'. [ 227.930302][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.720'. [ 227.977388][ T8284] syz.3.720 uses obsolete (PF_INET,SOCK_PACKET) [ 229.182053][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.630795][ T5896] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 230.258533][ T5896] usb 4-1: config 0 has no interface number 0 [ 230.268326][ T5896] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 230.277568][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.285604][ T5896] usb 4-1: Product: syz [ 230.289762][ T5896] usb 4-1: Manufacturer: syz [ 230.294401][ T5896] usb 4-1: SerialNumber: syz [ 230.301167][ T5896] usb 4-1: config 0 descriptor?? [ 230.308027][ T5896] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 230.318615][ T5896] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -22 [ 230.530861][ T5896] usb 4-1: USB disconnect, device number 14 [ 231.388626][ T8326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.734'. [ 233.821597][ T8367] wg1 speed is unknown, defaulting to 1000 [ 233.845348][ T8362] netlink: 'syz.2.745': attribute type 27 has an invalid length. [ 234.888021][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.529224][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.647211][ T8362] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.671958][ T8362] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.680909][ T8362] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.711959][ T8362] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.672463][ T5837] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 238.915948][ T5837] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 238.970812][ T5837] usb 4-1: config 6 has no interface number 0 [ 239.104363][ T5837] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 239.153646][ T5837] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.202081][ T30] audit: type=1400 audit(1753301301.243:344): avc: denied { mount } for pid=8461 comm="syz.2.774" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 239.212109][ T5837] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.239030][ T30] audit: type=1400 audit(1753301301.243:345): avc: denied { mounton } for pid=8461 comm="syz.2.774" path="/147/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 239.322061][ T5837] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 239.341716][ T5837] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 239.344460][ T30] audit: type=1400 audit(1753301301.383:346): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 239.401871][ T5837] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 239.428584][ T5837] usb 4-1: Product: syz [ 239.445837][ T5837] usb 4-1: Manufacturer: syz [ 239.460990][ T5837] usb 4-1: SerialNumber: syz [ 239.526314][ T5837] hso 4-1:6.2: Failed to find BULK IN ep [ 239.915325][ T8450] syz.3.770: attempt to access beyond end of device [ 239.915325][ T8450] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 239.928474][ T8450] gfs2: error -5 reading superblock [ 240.528111][ T8450] xt_l2tp: v2 doesn't support IP mode [ 240.545779][ T5837] usb 4-1: USB disconnect, device number 15 [ 243.271295][ T8529] ubi: mtd0 is already attached to ubi31 [ 243.640962][ T8385] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 244.053614][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.798'. [ 244.202140][ T8385] usb 2-1: Using ep0 maxpacket: 8 [ 244.208623][ T8385] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 244.223781][ T8385] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 244.242182][ T8385] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 244.260545][ T8385] usb 2-1: Product: syz [ 244.308352][ T8385] usb 2-1: Manufacturer: syz [ 244.504432][ T8385] usb 2-1: SerialNumber: syz [ 244.520394][ T8385] usb 2-1: config 0 descriptor?? [ 244.545419][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 244.612750][ T8385] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 246.010723][ T8571] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 246.021345][ T8385] gspca_zc3xx: reg_w_i err -71 [ 246.079105][ T8574] tipc: Enabled bearer , priority 0 [ 246.087293][ T8574] syzkaller0: entered promiscuous mode [ 246.093001][ T8574] syzkaller0: entered allmulticast mode [ 246.119134][ T8574] tipc: Resetting bearer [ 246.128010][ T8573] tipc: Resetting bearer [ 246.150911][ T8573] tipc: Disabling bearer [ 246.632842][ T8385] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 246.645485][ T8385] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 246.659179][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'. [ 246.678181][ T8385] usb 2-1: USB disconnect, device number 10 [ 246.901696][ T8591] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 246.924403][ T30] audit: type=1400 audit(1753301308.973:347): avc: denied { load_policy } for pid=8588 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 247.055648][ T8590] SELinux: failed to load policy [ 247.132006][ T5937] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 247.341997][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 247.367421][ T5937] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.378159][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.396960][ T5937] usb 1-1: Product: syz [ 247.406928][ T5937] usb 1-1: Manufacturer: syz [ 247.423916][ T5937] usb 1-1: SerialNumber: syz [ 247.432990][ T5937] usb 1-1: config 0 descriptor?? [ 247.687324][ T5937] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.351008][ T5937] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 248.831977][ T8385] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 248.993709][ T8385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.007704][ T8385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.018315][ T8385] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 249.027553][ T8385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.040059][ T8385] usb 3-1: config 0 descriptor?? [ 249.122012][ T5937] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.331960][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 249.348694][ T5937] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 249.376742][ T5937] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 249.401416][ T5937] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 249.439070][ T5937] usb 2-1: Product: syz [ 249.447732][ T5937] usb 2-1: Manufacturer: syz [ 249.455095][ T5937] usb 2-1: SerialNumber: syz [ 249.466300][ T5937] usb 2-1: config 0 descriptor?? [ 249.488485][ T8385] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 249.490076][ T5937] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 249.505048][ T8385] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 249.692970][ T8385] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 250.217959][ T8385] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 250.253144][ T8385] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -32 [ 250.266600][ T5837] usb 1-1: USB disconnect, device number 15 [ 251.017440][ T5937] gspca_zc3xx: reg_w_i err -71 [ 251.530526][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 251.950647][ T5837] usb 3-1: USB disconnect, device number 17 [ 252.132518][ T5937] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 252.138948][ T5937] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 252.152268][ T5937] usb 2-1: USB disconnect, device number 11 [ 255.201618][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.208267][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.629054][ T8696] netlink: 5 bytes leftover after parsing attributes in process `syz.2.846'. [ 255.652169][ T8696] 0ªî{X¹¦: renamed from gretap0 [ 256.193489][ T8696] 0ªî{X¹¦: entered allmulticast mode [ 256.203627][ T8696] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 256.272054][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 256.408207][ T30] audit: type=1400 audit(1753301318.443:348): avc: denied { append } for pid=8708 comm="syz.2.850" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 256.441989][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 257.168599][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 257.180230][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 257.189811][ T43] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 257.199369][ T43] usb 2-1: Product: syz [ 257.212007][ T43] usb 2-1: Manufacturer: syz [ 257.216626][ T43] usb 2-1: SerialNumber: syz [ 257.223854][ T43] usb 2-1: config 0 descriptor?? [ 257.232106][ T43] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 257.857917][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 258.793765][ T43] gspca_zc3xx: reg_w_i err -71 [ 259.221402][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'. [ 259.687251][ T43] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 259.706366][ T43] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 259.794281][ T43] usb 2-1: USB disconnect, device number 12 [ 260.194485][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 261.334897][ T30] audit: type=1400 audit(1753301323.383:349): avc: denied { getopt } for pid=8764 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 261.457605][ T8771] wg1 speed is unknown, defaulting to 1000 [ 264.408258][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 265.291248][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.879'. [ 266.285187][ T8821] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 268.309976][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'. [ 268.538521][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.889'. [ 269.160005][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 271.628317][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.891'. [ 271.970405][ T8896] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 273.482767][ T30] audit: type=1400 audit(1753301335.523:350): avc: denied { name_bind } for pid=8932 comm="syz.3.909" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 273.728730][ T30] audit: type=1400 audit(1753301335.773:351): avc: denied { bind } for pid=8937 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.749402][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 273.776595][ T30] audit: type=1400 audit(1753301335.793:352): avc: denied { write } for pid=8937 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.802862][ T30] audit: type=1400 audit(1753301335.793:353): avc: denied { setopt } for pid=8937 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.587168][ T8990] tipc: Enabled bearer , priority 0 [ 279.050316][ T8995] syzkaller0: entered promiscuous mode [ 279.318162][ T8995] syzkaller0: entered allmulticast mode [ 279.377122][ T8990] tipc: Resetting bearer [ 279.556409][ T8988] tipc: Resetting bearer [ 280.070661][ T8385] tipc: Node number set to 712559319 [ 280.114897][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 280.208203][ T8988] tipc: Disabling bearer [ 280.477473][ T9019] tipc: Enabled bearer , priority 0 [ 280.501039][ T9019] syzkaller0: entered promiscuous mode [ 280.521025][ T9019] syzkaller0: entered allmulticast mode [ 280.826472][ T9019] tipc: Resetting bearer [ 280.897234][ T9018] tipc: Resetting bearer [ 281.055936][ T9018] tipc: Disabling bearer [ 281.731023][ T9047] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 282.084416][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.941'. [ 282.622839][ T9063] tipc: Started in network mode [ 282.627744][ T9063] tipc: Node identity 3e3735de25b9, cluster identity 4711 [ 282.669854][ T9063] tipc: Enabled bearer , priority 0 [ 282.718469][ T9063] syzkaller0: entered promiscuous mode [ 282.731956][ T9063] syzkaller0: entered allmulticast mode [ 282.766482][ T9063] tipc: Resetting bearer [ 282.783829][ T9062] tipc: Resetting bearer [ 282.817233][ T9062] tipc: Disabling bearer [ 284.068235][ T9082] tipc: Enabled bearer , priority 0 [ 284.080287][ T9082] syzkaller0: entered promiscuous mode [ 284.086128][ T9082] syzkaller0: entered allmulticast mode [ 284.113249][ T9082] tipc: Resetting bearer [ 284.126135][ T9081] tipc: Resetting bearer [ 284.163002][ T9081] tipc: Disabling bearer [ 316.639465][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.645813][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.954292][ T30] audit: type=1400 audit(1753301419.003:354): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=35556 daddr=10.128.1.118 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 378.073714][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.080034][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.514780][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.521085][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.922187][ T31] INFO: task syz-executor:5834 blocked for more than 143 seconds. [ 445.930297][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 445.938033][ T31] Blocked by coredump. [ 445.942653][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.951385][ T31] task:syz-executor state:D stack:23128 pid:5834 tgid:5834 ppid:1 task_flags:0x40054c flags:0x00004006 [ 445.963386][ T31] Call Trace: [ 445.966663][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 445.969573][ T31] __schedule+0x116a/0x5dd0 [ 445.974242][ T31] ? __lock_acquire+0x622/0x1c90 [ 445.979194][ T31] ? __pfx___schedule+0x10/0x10 [ 445.984114][ T31] ? find_held_lock+0x2b/0x80 [ 446.001802][ T31] ? schedule+0x2d7/0x3a0 [ 446.006174][ T31] schedule+0xe7/0x3a0 [ 446.010253][ T31] schedule_preempt_disabled+0x13/0x30 [ 446.036599][ T31] __mutex_lock+0x6c7/0xb90 [ 446.041131][ T31] ? rfkill_unregister+0xec/0x2c0 [ 446.046664][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 446.051701][ T31] ? device_del+0x6b6/0x9f0 [ 446.056454][ T31] ? __pfx_device_del+0x10/0x10 [ 446.061307][ T31] ? _raw_read_unlock+0x28/0x50 [ 446.066194][ T31] ? rfkill_unregister+0xec/0x2c0 [ 446.071221][ T31] rfkill_unregister+0xec/0x2c0 [ 446.076088][ T31] hci_unregister_dev+0x337/0x640 [ 446.081139][ T31] ? __pfx_vhci_release+0x10/0x10 [ 446.086207][ T31] vhci_release+0x79/0xf0 [ 446.090532][ T31] __fput+0x3ff/0xb70 [ 446.094540][ T31] task_work_run+0x14d/0x240 [ 446.099127][ T31] ? __pfx_task_work_run+0x10/0x10 [ 446.104268][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 446.109466][ T31] do_exit+0x86c/0x2bd0 [ 446.113649][ T31] ? find_held_lock+0x2b/0x80 [ 446.118338][ T31] ? __pfx_do_exit+0x10/0x10 [ 446.122999][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.128042][ T31] ? find_held_lock+0x2b/0x80 [ 446.132756][ T31] do_group_exit+0xd3/0x2a0 [ 446.137271][ T31] get_signal+0x2673/0x26d0 [ 446.141818][ T31] ? __pfx_get_signal+0x10/0x10 [ 446.146691][ T31] ? __do_sys_wait4+0xd1/0x170 [ 446.151433][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 446.157186][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 446.163391][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 446.168679][ T31] ? dnotify_flush+0xa9/0x4c0 [ 446.173377][ T31] exit_to_user_mode_loop+0x84/0x110 [ 446.178660][ T31] do_syscall_64+0x3f6/0x4c0 [ 446.183268][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.189156][ T31] RIP: 0033:0x7faf85b84c17 [ 446.193593][ T31] RSP: 002b:00007ffc51c70b00 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 446.202039][ T31] RAX: fffffffffffffe00 RBX: 000000000000024e RCX: 00007faf85b84c17 [ 446.210003][ T31] RDX: 0000000040000000 RSI: 00007ffc51c70b6c RDI: 00000000ffffffff [ 446.218002][ T31] RBP: 00007ffc51c70b6c R08: 0000000000000000 R09: 0000000000000000 [ 446.225996][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000000c0 [ 446.234024][ T31] R13: 000055559102c590 R14: 0000000000045c9b R15: 00007ffc51c70bc0 [ 446.242047][ T31] [ 446.245090][ T31] INFO: task kworker/0:6:5944 blocked for more than 143 seconds. [ 446.252842][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 446.260462][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.269347][ T31] task:kworker/0:6 state:D stack:22472 pid:5944 tgid:5944 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 446.281395][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 446.288100][ T31] Call Trace: [ 446.291370][ T31] [ 446.294319][ T31] __schedule+0x116a/0x5dd0 [ 446.298827][ T31] ? __pfx___schedule+0x10/0x10 [ 446.303709][ T31] ? __pfx___schedule+0x10/0x10 [ 446.308558][ T31] ? irqentry_exit+0x3b/0x90 [ 446.313349][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.318576][ T31] ? find_held_lock+0x2b/0x80 [ 446.323280][ T31] ? schedule+0x2d7/0x3a0 [ 446.327611][ T31] schedule+0xe7/0x3a0 [ 446.331663][ T31] schedule_preempt_disabled+0x13/0x30 [ 446.337136][ T31] __mutex_lock+0x6c7/0xb90 [ 446.341632][ T31] ? __pfx___schedule+0x10/0x10 [ 446.346508][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 446.352866][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 446.357883][ T31] ? mark_held_locks+0x49/0x80 [ 446.362716][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.367920][ T31] ? preempt_schedule_notrace+0x62/0xe0 [ 446.373631][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 446.379951][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 446.386350][ T31] process_one_work+0x9cf/0x1b70 [ 446.392011][ T31] ? __pfx_process_one_work+0x10/0x10 [ 446.397485][ T31] ? assign_work+0x1a0/0x250 [ 446.402237][ T31] worker_thread+0x6c8/0xf10 [ 446.406830][ T31] ? __pfx_worker_thread+0x10/0x10 [ 446.411961][ T31] kthread+0x3c5/0x780 [ 446.416023][ T31] ? __pfx_kthread+0x10/0x10 [ 446.420590][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.425387][ T31] ? __pfx_kthread+0x10/0x10 [ 446.429984][ T31] ret_from_fork+0x5d4/0x6f0 [ 446.434640][ T31] ? __pfx_kthread+0x10/0x10 [ 446.439224][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.444102][ T31] [ 446.447135][ T31] INFO: task kworker/0:13:8385 blocked for more than 143 seconds. [ 446.459128][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 446.466769][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.475451][ T31] task:kworker/0:13 state:D stack:22792 pid:8385 tgid:8385 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 446.487517][ T31] Workqueue: events rfkill_sync_work [ 446.492832][ T31] Call Trace: [ 446.496115][ T31] [ 446.499025][ T31] __schedule+0x116a/0x5dd0 [ 446.503616][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 446.508565][ T31] ? __pfx___schedule+0x10/0x10 [ 446.513478][ T31] ? find_held_lock+0x2b/0x80 [ 446.518162][ T31] ? schedule+0x2d7/0x3a0 [ 446.522565][ T31] schedule+0xe7/0x3a0 [ 446.526636][ T31] schedule_preempt_disabled+0x13/0x30 [ 446.532107][ T31] __mutex_lock+0x6c7/0xb90 [ 446.536626][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 446.541194][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 446.546223][ T31] ? trace_contention_end+0xdd/0x130 [ 446.551505][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.556557][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 446.561159][ T31] ? mark_held_locks+0x49/0x80 [ 446.565975][ T31] nfc_dev_down+0x2d/0x2e0 [ 446.570391][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 446.575461][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 446.581198][ T31] rfkill_set_block+0x1fb/0x550 [ 446.586089][ T31] rfkill_sync+0x10a/0x1c0 [ 446.590513][ T31] rfkill_sync_work+0x27/0x40 [ 446.595219][ T31] process_one_work+0x9cf/0x1b70 [ 446.600163][ T31] ? __pfx_process_one_work+0x10/0x10 [ 446.605622][ T31] ? assign_work+0x1a0/0x250 [ 446.610209][ T31] worker_thread+0x6c8/0xf10 [ 446.614838][ T31] ? __kthread_parkme+0x19e/0x250 [ 446.619865][ T31] ? __pfx_worker_thread+0x10/0x10 [ 446.625005][ T31] kthread+0x3c5/0x780 [ 446.629100][ T31] ? __pfx_kthread+0x10/0x10 [ 446.633729][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.638502][ T31] ? __pfx_kthread+0x10/0x10 [ 446.643165][ T31] ret_from_fork+0x5d4/0x6f0 [ 446.647758][ T31] ? __pfx_kthread+0x10/0x10 [ 446.652361][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.657127][ T31] [ 446.660136][ T31] INFO: task syz.2.943:9048 blocked for more than 144 seconds. [ 446.667700][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 446.675334][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.684047][ T31] task:syz.2.943 state:D stack:26280 pid:9048 tgid:9048 ppid:5826 task_flags:0x400040 flags:0x00004004 [ 446.696001][ T31] Call Trace: [ 446.699259][ T31] [ 446.702230][ T31] __schedule+0x116a/0x5dd0 [ 446.706744][ T31] ? __lock_acquire+0x622/0x1c90 [ 446.711659][ T31] ? __pfx___schedule+0x10/0x10 [ 446.716912][ T31] ? find_held_lock+0x2b/0x80 [ 446.721637][ T31] ? schedule+0x2d7/0x3a0 [ 446.726151][ T31] schedule+0xe7/0x3a0 [ 446.730225][ T31] schedule_timeout+0x257/0x290 [ 446.735143][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 446.740534][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.745793][ T31] __wait_for_common+0x2fc/0x4e0 [ 446.750748][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 446.756165][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 446.761634][ T31] ? find_held_lock+0x2b/0x80 [ 446.766414][ T31] ? __flush_work+0x938/0xcc0 [ 446.771095][ T31] ? __flush_work+0x4d0/0xcc0 [ 446.775886][ T31] __flush_work+0x7d7/0xcc0 [ 446.780389][ T31] ? __pfx___flush_work+0x10/0x10 [ 446.785424][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 446.790735][ T31] ? __pfx___might_resched+0x10/0x10 [ 446.796122][ T31] __cancel_work_sync+0x10c/0x130 [ 446.801146][ T31] rfkill_unregister+0x95/0x2c0 [ 446.806089][ T31] nfc_unregister_device+0x94/0x330 [ 446.811315][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 446.817064][ T31] virtual_ncidev_close+0x4b/0xa0 [ 446.822115][ T31] __fput+0x3ff/0xb70 [ 446.826100][ T31] task_work_run+0x14d/0x240 [ 446.830701][ T31] ? __pfx_task_work_run+0x10/0x10 [ 446.835832][ T31] ? __might_fault+0x13b/0x190 [ 446.840604][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 446.845958][ T31] do_syscall_64+0x3f6/0x4c0 [ 446.850547][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.856445][ T31] RIP: 0033:0x7f5b9d98e9a9 [ 446.860855][ T31] RSP: 002b:00007fffcbe90eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 446.869300][ T31] RAX: 0000000000000000 RBX: 00007f5b9dbb7ba0 RCX: 00007f5b9d98e9a9 [ 446.877447][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 446.885559][ T31] RBP: 00007f5b9dbb7ba0 R08: 0000000000028444 R09: 00000014cbe911af [ 446.893567][ T31] R10: 00007f5b9dbb7ac0 R11: 0000000000000246 R12: 0000000000044fbe [ 446.901545][ T31] R13: 00007f5b9dbb6160 R14: ffffffffffffffff R15: 00007fffcbe90fd0 [ 446.909542][ T31] [ 446.912601][ T31] INFO: task syz.3.954:9093 blocked for more than 144 seconds. [ 446.920147][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 446.927908][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.936599][ T31] task:syz.3.954 state:D stack:28184 pid:9093 tgid:9083 ppid:5835 task_flags:0x400040 flags:0x00004004 [ 446.948517][ T31] Call Trace: [ 446.951821][ T31] [ 446.954765][ T31] __schedule+0x116a/0x5dd0 [ 446.959282][ T31] ? __lock_acquire+0x622/0x1c90 [ 446.964288][ T31] ? __pfx___schedule+0x10/0x10 [ 446.969143][ T31] ? find_held_lock+0x2b/0x80 [ 446.973846][ T31] ? schedule+0x2d7/0x3a0 [ 446.978182][ T31] schedule+0xe7/0x3a0 [ 446.982275][ T31] schedule_preempt_disabled+0x13/0x30 [ 446.987761][ T31] __mutex_lock+0x6c7/0xb90 [ 446.992290][ T31] ? misc_open+0x63/0x420 [ 446.996647][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 447.001691][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 447.006823][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 447.012496][ T31] ? __pfx_misc_open+0x10/0x10 [ 447.017257][ T31] ? misc_open+0x63/0x420 [ 447.021568][ T31] misc_open+0x63/0x420 [ 447.025740][ T31] ? __pfx_misc_open+0x10/0x10 [ 447.030534][ T31] chrdev_open+0x234/0x6a0 [ 447.035154][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 447.040094][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 447.046942][ T31] do_dentry_open+0x744/0x1c10 [ 447.051716][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 447.056680][ T31] vfs_open+0x82/0x3f0 [ 447.060751][ T31] path_openat+0x1de4/0x2cb0 [ 447.065384][ T31] ? __pfx_path_openat+0x10/0x10 [ 447.070492][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 447.075449][ T31] do_filp_open+0x20b/0x470 [ 447.079957][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 447.085058][ T31] ? alloc_fd+0x471/0x7d0 [ 447.089396][ T31] do_sys_openat2+0x11b/0x1d0 [ 447.094100][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 447.099317][ T31] __x64_sys_openat+0x174/0x210 [ 447.104209][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 447.109604][ T31] do_syscall_64+0xcd/0x4c0 [ 447.114160][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.120050][ T31] RIP: 0033:0x7f62ce58e9a9 [ 447.124542][ T31] RSP: 002b:00007f62cf427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.132976][ T31] RAX: ffffffffffffffda RBX: 00007f62ce7b6160 RCX: 00007f62ce58e9a9 [ 447.140949][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 447.148936][ T31] RBP: 00007f62ce610d69 R08: 0000000000000000 R09: 0000000000000000 [ 447.156916][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.164971][ T31] R13: 0000000000000000 R14: 00007f62ce7b6160 R15: 00007ffee95fce88 [ 447.172981][ T31] [ 447.175992][ T31] INFO: task syz.1.955:9096 blocked for more than 144 seconds. [ 447.183639][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 447.191258][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.200292][ T31] task:syz.1.955 state:D stack:26520 pid:9096 tgid:9088 ppid:5830 task_flags:0x400140 flags:0x00004004 [ 447.212287][ T31] Call Trace: [ 447.215554][ T31] [ 447.218466][ T31] __schedule+0x116a/0x5dd0 [ 447.223107][ T31] ? find_lowest_rq+0x17c/0x710 [ 447.227979][ T31] ? __lock_acquire+0x622/0x1c90 [ 447.232952][ T31] ? __pfx___schedule+0x10/0x10 [ 447.237808][ T31] ? find_held_lock+0x2b/0x80 [ 447.242526][ T31] ? schedule+0x2d7/0x3a0 [ 447.246864][ T31] schedule+0xe7/0x3a0 [ 447.250914][ T31] schedule_preempt_disabled+0x13/0x30 [ 447.256380][ T31] __mutex_lock+0x6c7/0xb90 [ 447.260880][ T31] ? misc_open+0x63/0x420 [ 447.265232][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 447.270256][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 447.275898][ T31] ? __pfx_misc_open+0x10/0x10 [ 447.280665][ T31] ? misc_open+0x63/0x420 [ 447.285048][ T31] misc_open+0x63/0x420 [ 447.289207][ T31] ? __pfx_misc_open+0x10/0x10 [ 447.293983][ T31] chrdev_open+0x234/0x6a0 [ 447.298397][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 447.303368][ T31] ? bpf_lsm_file_open+0x9/0x10 [ 447.308217][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 447.314997][ T31] do_dentry_open+0x744/0x1c10 [ 447.319768][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 447.324751][ T31] vfs_open+0x82/0x3f0 [ 447.328821][ T31] path_openat+0x1de4/0x2cb0 [ 447.333454][ T31] ? __pfx_path_openat+0x10/0x10 [ 447.338395][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 447.343355][ T31] do_filp_open+0x20b/0x470 [ 447.347869][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 447.353077][ T31] ? alloc_fd+0x471/0x7d0 [ 447.357494][ T31] do_sys_openat2+0x11b/0x1d0 [ 447.362393][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 447.367605][ T31] ? __pfx___might_resched+0x10/0x10 [ 447.373127][ T31] __x64_sys_openat+0x174/0x210 [ 447.377982][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 447.383387][ T31] do_syscall_64+0xcd/0x4c0 [ 447.387889][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.393811][ T31] RIP: 0033:0x7f5f2198e9a9 [ 447.398218][ T31] RSP: 002b:00007f5f2276f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.406672][ T31] RAX: ffffffffffffffda RBX: 00007f5f21bb6160 RCX: 00007f5f2198e9a9 [ 447.414661][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 447.422645][ T31] RBP: 00007f5f21a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 447.430608][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.438595][ T31] R13: 0000000000000000 R14: 00007f5f21bb6160 R15: 00007ffdca44bb38 [ 447.446599][ T31] [ 447.449618][ T31] INFO: task syz.0.957:9092 blocked for more than 144 seconds. [ 447.457191][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 447.464833][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.473519][ T31] task:syz.0.957 state:D stack:28440 pid:9092 tgid:9091 ppid:5834 task_flags:0x400140 flags:0x00004004 [ 447.485460][ T31] Call Trace: [ 447.488737][ T31] [ 447.491666][ T31] __schedule+0x116a/0x5dd0 [ 447.496203][ T31] ? __lock_acquire+0x622/0x1c90 [ 447.501154][ T31] ? __pfx___schedule+0x10/0x10 [ 447.506029][ T31] ? find_held_lock+0x2b/0x80 [ 447.510708][ T31] ? schedule+0x2d7/0x3a0 [ 447.515079][ T31] schedule+0xe7/0x3a0 [ 447.519155][ T31] schedule_preempt_disabled+0x13/0x30 [ 447.524637][ T31] __mutex_lock+0x6c7/0xb90 [ 447.529158][ T31] ? rfkill_fop_open+0x136/0x750 [ 447.534129][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 447.539152][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 447.544533][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 447.549920][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 447.555211][ T31] ? rfkill_fop_open+0x136/0x750 [ 447.560150][ T31] rfkill_fop_open+0x136/0x750 [ 447.564920][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 447.570564][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 447.575866][ T31] misc_open+0x35a/0x420 [ 447.580112][ T31] ? __pfx_misc_open+0x10/0x10 [ 447.584881][ T31] chrdev_open+0x234/0x6a0 [ 447.589294][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 447.594256][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 447.601033][ T31] do_dentry_open+0x744/0x1c10 [ 447.605840][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 447.610786][ T31] vfs_open+0x82/0x3f0 [ 447.614889][ T31] path_openat+0x1de4/0x2cb0 [ 447.619488][ T31] ? __pfx_path_openat+0x10/0x10 [ 447.624434][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 447.629366][ T31] do_filp_open+0x20b/0x470 [ 447.633918][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 447.638970][ T31] ? alloc_fd+0x471/0x7d0 [ 447.643356][ T31] do_sys_openat2+0x11b/0x1d0 [ 447.648029][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 447.653258][ T31] ? __pfx___seccomp_filter+0x10/0x10 [ 447.658636][ T31] __x64_sys_openat+0x174/0x210 [ 447.663501][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 447.668871][ T31] ? __secure_computing+0x28e/0x3b0 [ 447.674153][ T31] do_syscall_64+0xcd/0x4c0 [ 447.678653][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.684688][ T31] RIP: 0033:0x7faf85b8e9a9 [ 447.689132][ T31] RSP: 002b:00007faf86aaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.697557][ T31] RAX: ffffffffffffffda RBX: 00007faf85db5fa0 RCX: 00007faf85b8e9a9 [ 447.705546][ T31] RDX: 0000000000000402 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 447.713533][ T31] RBP: 00007faf85c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 447.721504][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.729507][ T31] R13: 0000000000000000 R14: 00007faf85db5fa0 R15: 00007ffc51c707a8 [ 447.737509][ T31] [ 447.740531][ T31] INFO: task syz.0.957:9100 blocked for more than 145 seconds. [ 447.748088][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 447.757615][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.766361][ T31] task:syz.0.957 state:D stack:28888 pid:9100 tgid:9091 ppid:5834 task_flags:0x400040 flags:0x00004004 [ 447.778326][ T31] Call Trace: [ 447.781588][ T31] [ 447.784532][ T31] __schedule+0x116a/0x5dd0 [ 447.789051][ T31] ? __lock_acquire+0x622/0x1c90 [ 447.794015][ T31] ? __pfx___schedule+0x10/0x10 [ 447.798887][ T31] ? find_held_lock+0x2b/0x80 [ 447.803577][ T31] ? schedule+0x2d7/0x3a0 [ 447.807911][ T31] schedule+0xe7/0x3a0 [ 447.812004][ T31] schedule_preempt_disabled+0x13/0x30 [ 447.817465][ T31] __mutex_lock+0x6c7/0xb90 [ 447.821988][ T31] ? misc_open+0x63/0x420 [ 447.826320][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 447.831325][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 447.836712][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 447.842385][ T31] ? __pfx_misc_open+0x10/0x10 [ 447.847217][ T31] ? misc_open+0x63/0x420 [ 447.851544][ T31] misc_open+0x63/0x420 [ 447.855718][ T31] ? __pfx_misc_open+0x10/0x10 [ 447.860489][ T31] chrdev_open+0x234/0x6a0 [ 447.864928][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 447.869860][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 447.876643][ T31] do_dentry_open+0x744/0x1c10 [ 447.881437][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 447.886388][ T31] vfs_open+0x82/0x3f0 [ 447.890455][ T31] path_openat+0x1de4/0x2cb0 [ 447.895068][ T31] ? __pfx_path_openat+0x10/0x10 [ 447.900009][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 447.904968][ T31] do_filp_open+0x20b/0x470 [ 447.909476][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 447.914768][ T31] ? alloc_fd+0x471/0x7d0 [ 447.919191][ T31] do_sys_openat2+0x11b/0x1d0 [ 447.923895][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 447.929091][ T31] ? find_held_lock+0x2b/0x80 [ 447.933795][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 447.938739][ T31] __x64_sys_openat+0x174/0x210 [ 447.943608][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 447.948980][ T31] ? do_user_addr_fault+0x843/0x1370 [ 447.954282][ T31] do_syscall_64+0xcd/0x4c0 [ 447.958786][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.964710][ T31] RIP: 0033:0x7faf85b8e9a9 [ 447.969118][ T31] RSP: 002b:00007faf86a68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.977577][ T31] RAX: ffffffffffffffda RBX: 00007faf85db6160 RCX: 00007faf85b8e9a9 [ 447.985577][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 00000000ffffff9c [ 447.993578][ T31] RBP: 00007faf85c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 448.001553][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.009542][ T31] R13: 0000000000000001 R14: 00007faf85db6160 R15: 00007ffc51c707a8 [ 448.017531][ T31] [ 448.020544][ T31] INFO: task syz.4.958:9103 blocked for more than 145 seconds. [ 448.028103][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 448.035744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.044483][ T31] task:syz.4.958 state:D stack:25672 pid:9103 tgid:9098 ppid:5823 task_flags:0x400140 flags:0x00004004 [ 448.056426][ T31] Call Trace: [ 448.059686][ T31] [ 448.062637][ T31] __schedule+0x116a/0x5dd0 [ 448.067168][ T31] ? __lock_acquire+0x622/0x1c90 [ 448.072128][ T31] ? __pfx___schedule+0x10/0x10 [ 448.076986][ T31] ? find_held_lock+0x2b/0x80 [ 448.081649][ T31] ? schedule+0x2d7/0x3a0 [ 448.086018][ T31] schedule+0xe7/0x3a0 [ 448.090095][ T31] schedule_preempt_disabled+0x13/0x30 [ 448.095568][ T31] __mutex_lock+0x6c7/0xb90 [ 448.100069][ T31] ? misc_open+0x63/0x420 [ 448.104455][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 448.109494][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 448.115156][ T31] ? __pfx_misc_open+0x10/0x10 [ 448.119932][ T31] ? misc_open+0x63/0x420 [ 448.124294][ T31] misc_open+0x63/0x420 [ 448.128451][ T31] ? __pfx_misc_open+0x10/0x10 [ 448.133244][ T31] chrdev_open+0x234/0x6a0 [ 448.137656][ T31] ? file_set_fsnotify_mode_from_watchers+0x59/0x640 [ 448.144354][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 448.149316][ T31] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 448.155412][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 448.162219][ T31] do_dentry_open+0x744/0x1c10 [ 448.167008][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 448.171980][ T31] vfs_open+0x82/0x3f0 [ 448.176050][ T31] path_openat+0x1de4/0x2cb0 [ 448.180627][ T31] ? __pfx___schedule+0x10/0x10 [ 448.185511][ T31] ? __pfx_path_openat+0x10/0x10 [ 448.190456][ T31] do_filp_open+0x20b/0x470 [ 448.194976][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 448.200028][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.205261][ T31] ? alloc_fd+0x471/0x7d0 [ 448.209598][ T31] do_sys_openat2+0x11b/0x1d0 [ 448.214288][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.219502][ T31] ? __pfx___schedule+0x10/0x10 [ 448.224381][ T31] __x64_sys_openat+0x174/0x210 [ 448.229237][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 448.234660][ T31] do_syscall_64+0xcd/0x4c0 [ 448.239196][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.245128][ T31] RIP: 0033:0x7f29e158e9a9 [ 448.249535][ T31] RSP: 002b:00007f29e2341038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 448.257971][ T31] RAX: ffffffffffffffda RBX: 00007f29e17b6160 RCX: 00007f29e158e9a9 [ 448.265959][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 448.273974][ T31] RBP: 00007f29e1610d69 R08: 0000000000000000 R09: 0000000000000000 [ 448.281958][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.289908][ T31] R13: 0000000000000000 R14: 00007f29e17b6160 R15: 00007ffd7d9d9e28 [ 448.297907][ T31] [ 448.300929][ T31] INFO: task syz-executor:9109 blocked for more than 145 seconds. [ 448.308775][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 448.316423][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.325089][ T31] task:syz-executor state:D stack:28712 pid:9109 tgid:9109 ppid:1 task_flags:0x400040 flags:0x00004000 [ 448.337032][ T31] Call Trace: [ 448.340305][ T31] [ 448.343263][ T31] __schedule+0x116a/0x5dd0 [ 448.347793][ T31] ? __lock_acquire+0x622/0x1c90 [ 448.352772][ T31] ? __pfx___schedule+0x10/0x10 [ 448.357633][ T31] ? find_held_lock+0x2b/0x80 [ 448.362328][ T31] ? schedule+0x2d7/0x3a0 [ 448.366661][ T31] schedule+0xe7/0x3a0 [ 448.370714][ T31] schedule_preempt_disabled+0x13/0x30 [ 448.376223][ T31] __mutex_lock+0x6c7/0xb90 [ 448.380738][ T31] ? misc_open+0x63/0x420 [ 448.385088][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 448.390107][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 448.395230][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 448.400885][ T31] ? __pfx_misc_open+0x10/0x10 [ 448.405661][ T31] ? misc_open+0x63/0x420 [ 448.409989][ T31] misc_open+0x63/0x420 [ 448.414188][ T31] ? __pfx_misc_open+0x10/0x10 [ 448.418954][ T31] chrdev_open+0x234/0x6a0 [ 448.423393][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 448.428327][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 448.435103][ T31] do_dentry_open+0x744/0x1c10 [ 448.439892][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 448.444839][ T31] vfs_open+0x82/0x3f0 [ 448.448912][ T31] path_openat+0x1de4/0x2cb0 [ 448.453538][ T31] ? __pfx___up_read+0x10/0x10 [ 448.458301][ T31] ? __pfx_path_openat+0x10/0x10 [ 448.463282][ T31] do_filp_open+0x20b/0x470 [ 448.467803][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 448.472918][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.477712][ T31] ? alloc_fd+0x471/0x7d0 [ 448.482085][ T31] do_sys_openat2+0x11b/0x1d0 [ 448.486767][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.491999][ T31] ? fd_install+0x244/0x750 [ 448.496510][ T31] __x64_sys_openat+0x174/0x210 [ 448.501342][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 448.506747][ T31] ? do_user_addr_fault+0x843/0x1370 [ 448.512108][ T31] do_syscall_64+0xcd/0x4c0 [ 448.516607][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.522514][ T31] RIP: 0033:0x7f2774f8d291 [ 448.526923][ T31] RSP: 002b:00007fff5e0d5bc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 448.535354][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2774f8d291 [ 448.543334][ T31] RDX: 0000000000000002 RSI: 00007f2775011736 RDI: 00000000ffffff9c [ 448.551297][ T31] RBP: 00007f2775011736 R08: 0000000000000000 R09: 00007f2775ced6c0 [ 448.559283][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 448.567276][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 448.575279][ T31] [ 448.578294][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 448.587323][ T31] INFO: task syz-executor:9112 blocked for more than 146 seconds. [ 448.595140][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 448.602791][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.611452][ T31] task:syz-executor state:D stack:28712 pid:9112 tgid:9112 ppid:1 task_flags:0x400040 flags:0x00004000 [ 448.623438][ T31] Call Trace: [ 448.626710][ T31] [ 448.629623][ T31] __schedule+0x116a/0x5dd0 [ 448.634202][ T31] ? __lock_acquire+0x622/0x1c90 [ 448.639148][ T31] ? __pfx___schedule+0x10/0x10 [ 448.644050][ T31] ? find_held_lock+0x2b/0x80 [ 448.648710][ T31] ? schedule+0x2d7/0x3a0 [ 448.653068][ T31] schedule+0xe7/0x3a0 [ 448.657140][ T31] schedule_preempt_disabled+0x13/0x30 [ 448.662638][ T31] __mutex_lock+0x6c7/0xb90 [ 448.667138][ T31] ? misc_open+0x63/0x420 [ 448.671450][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 448.676494][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 448.681521][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 448.687184][ T31] ? __pfx_misc_open+0x10/0x10 [ 448.691980][ T31] ? misc_open+0x63/0x420 [ 448.696308][ T31] misc_open+0x63/0x420 [ 448.700446][ T31] ? __pfx_misc_open+0x10/0x10 [ 448.705219][ T31] chrdev_open+0x234/0x6a0 [ 448.709649][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 448.714614][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 448.721395][ T31] do_dentry_open+0x744/0x1c10 [ 448.726195][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 448.731143][ T31] vfs_open+0x82/0x3f0 [ 448.735237][ T31] path_openat+0x1de4/0x2cb0 [ 448.739834][ T31] ? __pfx___up_read+0x10/0x10 [ 448.744621][ T31] ? __pfx_path_openat+0x10/0x10 [ 448.749566][ T31] do_filp_open+0x20b/0x470 [ 448.754087][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 448.759116][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.763907][ T31] ? alloc_fd+0x471/0x7d0 [ 448.768266][ T31] do_sys_openat2+0x11b/0x1d0 [ 448.772976][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.778189][ T31] ? fd_install+0x244/0x750 [ 448.782746][ T31] __x64_sys_openat+0x174/0x210 [ 448.787611][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 448.794994][ T31] ? do_user_addr_fault+0x843/0x1370 [ 448.800304][ T31] do_syscall_64+0xcd/0x4c0 [ 448.804989][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.810903][ T31] RIP: 0033:0x7fdeab18d291 [ 448.815346][ T31] RSP: 002b:00007ffd315c8320 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 448.823793][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdeab18d291 [ 448.831813][ T31] RDX: 0000000000000002 RSI: 00007fdeab211736 RDI: 00000000ffffff9c [ 448.839795][ T31] RBP: 00007fdeab211736 R08: 0000000000000000 R09: 00007fdeabeed6c0 [ 448.847838][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 448.855851][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 448.863876][ T31] [ 448.866887][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 448.875997][ T31] INFO: task syz-executor:9113 blocked for more than 146 seconds. [ 448.883841][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 448.891442][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.900115][ T31] task:syz-executor state:D stack:28184 pid:9113 tgid:9113 ppid:1 task_flags:0x400040 flags:0x00004000 [ 448.912075][ T31] Call Trace: [ 448.915347][ T31] [ 448.918263][ T31] __schedule+0x116a/0x5dd0 [ 448.922818][ T31] ? __lock_acquire+0x622/0x1c90 [ 448.927755][ T31] ? __pfx___schedule+0x10/0x10 [ 448.932653][ T31] ? find_held_lock+0x2b/0x80 [ 448.937333][ T31] ? schedule+0x2d7/0x3a0 [ 448.941692][ T31] schedule+0xe7/0x3a0 [ 448.945787][ T31] schedule_preempt_disabled+0x13/0x30 [ 448.951250][ T31] __mutex_lock+0x6c7/0xb90 [ 448.955950][ T31] ? misc_open+0x63/0x420 [ 448.960294][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 448.965591][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 448.970656][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 448.976505][ T31] ? __pfx_misc_open+0x10/0x10 [ 448.981293][ T31] ? misc_open+0x63/0x420 [ 448.985960][ T31] misc_open+0x63/0x420 [ 448.990128][ T31] ? __pfx_misc_open+0x10/0x10 [ 448.994910][ T31] chrdev_open+0x234/0x6a0 [ 448.999330][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 449.004292][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 449.011087][ T31] do_dentry_open+0x744/0x1c10 [ 449.015868][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 449.020806][ T31] vfs_open+0x82/0x3f0 [ 449.024887][ T31] path_openat+0x1de4/0x2cb0 [ 449.029486][ T31] ? __pfx___up_read+0x10/0x10 [ 449.034273][ T31] ? __pfx_path_openat+0x10/0x10 [ 449.039219][ T31] do_filp_open+0x20b/0x470 [ 449.043788][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 449.048819][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.053643][ T31] ? alloc_fd+0x471/0x7d0 [ 449.057983][ T31] do_sys_openat2+0x11b/0x1d0 [ 449.062684][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.067899][ T31] ? fd_install+0x244/0x750 [ 449.072438][ T31] __x64_sys_openat+0x174/0x210 [ 449.077292][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 449.082699][ T31] ? do_user_addr_fault+0x843/0x1370 [ 449.088006][ T31] do_syscall_64+0xcd/0x4c0 [ 449.092559][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.098457][ T31] RIP: 0033:0x7fd0d558d291 [ 449.102900][ T31] RSP: 002b:00007ffc6fc05750 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 449.111364][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd0d558d291 [ 449.119510][ T31] RDX: 0000000000000002 RSI: 00007fd0d5611736 RDI: 00000000ffffff9c [ 449.127506][ T31] RBP: 00007fd0d5611736 R08: 0000000000000000 R09: 00007fd0d62ed6c0 [ 449.135488][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 449.143478][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 449.151449][ T31] [ 449.154485][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 449.163546][ T31] INFO: task syz-executor:9117 blocked for more than 146 seconds. [ 449.171350][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 449.178997][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.187675][ T31] task:syz-executor state:D stack:28136 pid:9117 tgid:9117 ppid:1 task_flags:0x400040 flags:0x00004000 [ 449.199612][ T31] Call Trace: [ 449.202896][ T31] [ 449.205813][ T31] __schedule+0x116a/0x5dd0 [ 449.210307][ T31] ? __lock_acquire+0x622/0x1c90 [ 449.215282][ T31] ? __pfx___schedule+0x10/0x10 [ 449.220156][ T31] ? find_held_lock+0x2b/0x80 [ 449.224884][ T31] ? schedule+0x2d7/0x3a0 [ 449.229227][ T31] schedule+0xe7/0x3a0 [ 449.233344][ T31] schedule_preempt_disabled+0x13/0x30 [ 449.238823][ T31] __mutex_lock+0x6c7/0xb90 [ 449.243366][ T31] ? misc_open+0x63/0x420 [ 449.247724][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 449.252760][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 449.257786][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 449.263455][ T31] ? __pfx_misc_open+0x10/0x10 [ 449.268220][ T31] ? misc_open+0x63/0x420 [ 449.272572][ T31] misc_open+0x63/0x420 [ 449.276727][ T31] ? __pfx_misc_open+0x10/0x10 [ 449.281491][ T31] chrdev_open+0x234/0x6a0 [ 449.285925][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 449.290859][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 449.297642][ T31] do_dentry_open+0x744/0x1c10 [ 449.302462][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 449.307397][ T31] vfs_open+0x82/0x3f0 [ 449.311447][ T31] path_openat+0x1de4/0x2cb0 [ 449.316071][ T31] ? __pfx___up_read+0x10/0x10 [ 449.320831][ T31] ? __pfx_path_openat+0x10/0x10 [ 449.325789][ T31] do_filp_open+0x20b/0x470 [ 449.330302][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 449.335345][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.340141][ T31] ? alloc_fd+0x471/0x7d0 [ 449.344504][ T31] do_sys_openat2+0x11b/0x1d0 [ 449.349181][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.354451][ T31] ? fd_install+0x244/0x750 [ 449.358968][ T31] __x64_sys_openat+0x174/0x210 [ 449.363915][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 449.369300][ T31] ? do_user_addr_fault+0x843/0x1370 [ 449.374646][ T31] do_syscall_64+0xcd/0x4c0 [ 449.379161][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.385064][ T31] RIP: 0033:0x7f067c18d291 [ 449.389473][ T31] RSP: 002b:00007fff02435b10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 449.397906][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f067c18d291 [ 449.405890][ T31] RDX: 0000000000000002 RSI: 00007f067c211736 RDI: 00000000ffffff9c [ 449.413880][ T31] RBP: 00007f067c211736 R08: 0000000000000000 R09: 00007f067ceed6c0 [ 449.421874][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 449.429838][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 449.437850][ T31] [ 449.440859][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 449.449910][ T31] INFO: task syz-executor:9118 blocked for more than 146 seconds. [ 449.457751][ T31] Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 [ 449.465388][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.474068][ T31] task:syz-executor state:D stack:28712 pid:9118 tgid:9118 ppid:1 task_flags:0x400040 flags:0x00004000 [ 449.486009][ T31] Call Trace: [ 449.489286][ T31] [ 449.492246][ T31] __schedule+0x116a/0x5dd0 [ 449.496774][ T31] ? __lock_acquire+0x622/0x1c90 [ 449.501723][ T31] ? __pfx___schedule+0x10/0x10 [ 449.506619][ T31] ? find_held_lock+0x2b/0x80 [ 449.511282][ T31] ? schedule+0x2d7/0x3a0 [ 449.515644][ T31] schedule+0xe7/0x3a0 [ 449.519716][ T31] schedule_preempt_disabled+0x13/0x30 [ 449.525209][ T31] __mutex_lock+0x6c7/0xb90 [ 449.529707][ T31] ? misc_open+0x63/0x420 [ 449.534049][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 449.539069][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 449.544133][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 449.549766][ T31] ? __pfx_misc_open+0x10/0x10 [ 449.554566][ T31] ? misc_open+0x63/0x420 [ 449.558892][ T31] misc_open+0x63/0x420 [ 449.563070][ T31] ? __pfx_misc_open+0x10/0x10 [ 449.567833][ T31] chrdev_open+0x234/0x6a0 [ 449.572288][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 449.577221][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 449.584019][ T31] do_dentry_open+0x744/0x1c10 [ 449.588787][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 449.593765][ T31] vfs_open+0x82/0x3f0 [ 449.597837][ T31] path_openat+0x1de4/0x2cb0 [ 449.602457][ T31] ? __pfx___up_read+0x10/0x10 [ 449.607215][ T31] ? __pfx_path_openat+0x10/0x10 [ 449.612205][ T31] do_filp_open+0x20b/0x470 [ 449.616723][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 449.621779][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.626556][ T31] ? alloc_fd+0x471/0x7d0 [ 449.630875][ T31] do_sys_openat2+0x11b/0x1d0 [ 449.635559][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.640755][ T31] ? fd_install+0x244/0x750 [ 449.645288][ T31] __x64_sys_openat+0x174/0x210 [ 449.650151][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 449.655533][ T31] ? do_user_addr_fault+0x843/0x1370 [ 449.660826][ T31] do_syscall_64+0xcd/0x4c0 [ 449.665360][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.671247][ T31] RIP: 0033:0x7fd82658d291 [ 449.675665][ T31] RSP: 002b:00007ffd0fe2e800 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 449.684107][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd82658d291 [ 449.692109][ T31] RDX: 0000000000000002 RSI: 00007fd826611736 RDI: 00000000ffffff9c [ 449.700072][ T31] RBP: 00007fd826611736 R08: 0000000000000000 R09: 00007fd8272ed6c0 [ 449.708064][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 449.716056][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 449.724045][ T31] [ 449.727053][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 449.736105][ T31] [ 449.736105][ T31] Showing all locks held in the system: [ 449.743858][ T31] 1 lock held by khungtaskd/31: [ 449.748700][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 449.758843][ T31] 2 locks held by kworker/u8:2/36: [ 449.764238][ T31] 1 lock held by klogd/5189: [ 449.768820][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 449.778747][ T31] 2 locks held by getty/5592: [ 449.783580][ T31] #0: ffff8880380da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 449.793372][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 449.803578][ T31] 1 lock held by syz-executor/5834: [ 449.808762][ T31] #0: ffffffff90800528 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 449.818864][ T31] 3 locks held by kworker/0:6/5944: [ 449.824068][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 449.834739][ T31] #1: ffffc9000534fd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 449.847710][ T31] #2: ffffffff90800528 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 449.859169][ T31] 4 locks held by kworker/0:13/8385: [ 449.864572][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 449.875095][ T31] #1: ffffc9001be27d10 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 449.886924][ T31] #2: ffffffff90800528 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 449.896876][ T31] #3: ffff88807935a100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 449.905880][ T31] 1 lock held by syz.2.943/9048: [ 449.910821][ T31] #0: ffff88807935a100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 449.920614][ T31] 1 lock held by syz.3.954/9093: [ 449.925591][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 449.934070][ T31] 1 lock held by syz.1.955/9096: [ 449.938994][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 449.947442][ T31] 2 locks held by syz.0.957/9092: [ 449.952485][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 449.960936][ T31] #1: ffffffff90800528 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x136/0x750 [ 449.970942][ T31] 1 lock held by syz.0.957/9100: [ 449.975890][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 449.984369][ T31] 1 lock held by syz.4.958/9103: [ 449.989291][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 449.997882][ T31] 1 lock held by syz-executor/9109: [ 450.003286][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.011855][ T31] 1 lock held by syz-executor/9112: [ 450.017060][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.025540][ T31] 1 lock held by syz-executor/9113: [ 450.030725][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.039207][ T31] 1 lock held by syz-executor/9117: [ 450.044409][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.052874][ T31] 1 lock held by syz-executor/9118: [ 450.058063][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.066513][ T31] 1 lock held by syz-executor/9123: [ 450.071698][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.080279][ T31] 1 lock held by syz-executor/9127: [ 450.085487][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.093959][ T31] 1 lock held by syz-executor/9128: [ 450.099127][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.107579][ T31] 1 lock held by syz-executor/9131: [ 450.112798][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.121242][ T31] 1 lock held by syz-executor/9132: [ 450.126463][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.135407][ T31] 1 lock held by syz-executor/9135: [ 450.140589][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.149068][ T31] 1 lock held by syz-executor/9139: [ 450.154300][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.162753][ T31] 1 lock held by syz-executor/9140: [ 450.167941][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.176396][ T31] 1 lock held by syz-executor/9144: [ 450.181580][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.190057][ T31] 1 lock held by syz-executor/9145: [ 450.195257][ T31] #0: ffffffff8f2fec28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 450.203756][ T31] [ 450.206072][ T31] ============================================= [ 450.206072][ T31] [ 450.214795][ T31] NMI backtrace for cpu 1 [ 450.214807][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 450.214829][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.214839][ T31] Call Trace: [ 450.214845][ T31] [ 450.214851][ T31] dump_stack_lvl+0x116/0x1f0 [ 450.214870][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 450.214888][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.214905][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 450.214921][ T31] watchdog+0xf70/0x12c0 [ 450.214935][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.214946][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.214964][ T31] ? __kthread_parkme+0x19e/0x250 [ 450.214980][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.214991][ T31] kthread+0x3c5/0x780 [ 450.215002][ T31] ? __pfx_kthread+0x10/0x10 [ 450.215012][ T31] ? rcu_is_watching+0x12/0xc0 [ 450.215027][ T31] ? __pfx_kthread+0x10/0x10 [ 450.215037][ T31] ret_from_fork+0x5d4/0x6f0 [ 450.215052][ T31] ? __pfx_kthread+0x10/0x10 [ 450.215069][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.215086][ T31] [ 450.215090][ T31] Sending NMI from CPU 1 to CPUs 0: [ 450.333171][ C0] NMI backtrace for cpu 0 [ 450.333184][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 450.333201][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.333209][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 450.333234][ C0] Code: 6b 6d 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 89 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 450.333247][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 450.333259][ C0] RAX: 000000000126e4d9 RBX: 0000000000000000 RCX: ffffffff8b868c99 [ 450.333268][ C0] RDX: 0000000000000000 RSI: ffffffff8de30036 RDI: ffffffff8c157460 [ 450.333277][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 450.333286][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 450.333294][ C0] R13: ffffffff8e297780 R14: ffffffff90a94050 R15: 0000000000000000 [ 450.333303][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 450.333317][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.333326][ C0] CR2: 00007ffe0a1daf7c CR3: 000000000e382000 CR4: 00000000003526f0 [ 450.333335][ C0] Call Trace: [ 450.333340][ C0] [ 450.333344][ C0] default_idle+0x13/0x20 [ 450.333359][ C0] default_idle_call+0x6d/0xb0 [ 450.333372][ C0] do_idle+0x391/0x510 [ 450.333390][ C0] ? __pfx_do_idle+0x10/0x10 [ 450.333406][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 450.333426][ C0] cpu_startup_entry+0x4f/0x60 [ 450.333442][ C0] rest_init+0x16b/0x2b0 [ 450.333456][ C0] ? acpi_subsystem_init+0x133/0x180 [ 450.333475][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 450.333490][ C0] start_kernel+0x3ee/0x4d0 [ 450.333502][ C0] x86_64_start_reservations+0x18/0x30 [ 450.333515][ C0] x86_64_start_kernel+0x130/0x190 [ 450.333527][ C0] common_startup_64+0x13e/0x148 [ 450.333545][ C0] [ 450.334206][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 450.532765][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 450.544553][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.554590][ T31] Call Trace: [ 450.557853][ T31] [ 450.560770][ T31] dump_stack_lvl+0x3d/0x1f0 [ 450.565348][ T31] panic+0x71c/0x800 [ 450.569239][ T31] ? __pfx_panic+0x10/0x10 [ 450.573679][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 450.579042][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.585021][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 450.590387][ T31] ? watchdog+0xdda/0x12c0 [ 450.594789][ T31] ? watchdog+0xdcd/0x12c0 [ 450.599195][ T31] watchdog+0xdeb/0x12c0 [ 450.603427][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.608091][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.613284][ T31] ? __kthread_parkme+0x19e/0x250 [ 450.618298][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.622961][ T31] kthread+0x3c5/0x780 [ 450.627013][ T31] ? __pfx_kthread+0x10/0x10 [ 450.631591][ T31] ? rcu_is_watching+0x12/0xc0 [ 450.636345][ T31] ? __pfx_kthread+0x10/0x10 [ 450.640921][ T31] ret_from_fork+0x5d4/0x6f0 [ 450.645501][ T31] ? __pfx_kthread+0x10/0x10 [ 450.650076][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.654838][ T31] [ 450.658030][ T31] Kernel Offset: disabled [ 450.662335][ T31] Rebooting in 86400 seconds..