last executing test programs: 2m3.636145031s ago: executing program 0 (id=241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdir(0x0, 0x54) chdir(0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r1, &(0x7f0000000300)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x78, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "aea4621b8b6a303c12e870461c1def78b71964a15e9cbd7c38de4d345499b914", "fb677c98f0bb5462049c4f9188be12fa", {"a09c4c605dbbff5d31e66115929d79ef", "ed01cfed55c3e489ead40edb102ab0b3"}}}}}}, 0x82) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) munlockall() 1m44.907383677s ago: executing program 1 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) 1m44.90704618s ago: executing program 0 (id=241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdir(0x0, 0x54) chdir(0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r1, &(0x7f0000000300)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x78, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "aea4621b8b6a303c12e870461c1def78b71964a15e9cbd7c38de4d345499b914", "fb677c98f0bb5462049c4f9188be12fa", {"a09c4c605dbbff5d31e66115929d79ef", "ed01cfed55c3e489ead40edb102ab0b3"}}}}}}, 0x82) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) munlockall() 1m43.690397772s ago: executing program 1 (id=391): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0xfffd}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf281, 0x0, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r5, 0x0, 0x0) 1m43.212592947s ago: executing program 1 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x80}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1m41.983173242s ago: executing program 1 (id=401): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m41.895948998s ago: executing program 1 (id=402): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r1, 0x0) 1m40.065842133s ago: executing program 1 (id=408): mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='sysv\x00', 0x8000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'netdevsim0\x00', @random="0e00"}) writev(r0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0x11) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x0, 0xfffffffffffffeef, 0x0, &(0x7f0000000100)="65c5469400344a6020a493000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m39.33838982s ago: executing program 32 (id=408): mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='sysv\x00', 0x8000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'netdevsim0\x00', @random="0e00"}) writev(r0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0x11) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x0, 0xfffffffffffffeef, 0x0, &(0x7f0000000100)="65c5469400344a6020a493000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m24.325367668s ago: executing program 0 (id=241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdir(0x0, 0x54) chdir(0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r1, &(0x7f0000000300)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x78, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "aea4621b8b6a303c12e870461c1def78b71964a15e9cbd7c38de4d345499b914", "fb677c98f0bb5462049c4f9188be12fa", {"a09c4c605dbbff5d31e66115929d79ef", "ed01cfed55c3e489ead40edb102ab0b3"}}}}}}, 0x82) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) munlockall() 1m7.712132705s ago: executing program 0 (id=241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdir(0x0, 0x54) chdir(0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r1, &(0x7f0000000300)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x78, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "aea4621b8b6a303c12e870461c1def78b71964a15e9cbd7c38de4d345499b914", "fb677c98f0bb5462049c4f9188be12fa", {"a09c4c605dbbff5d31e66115929d79ef", "ed01cfed55c3e489ead40edb102ab0b3"}}}}}}, 0x82) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) munlockall() 46.887173078s ago: executing program 0 (id=241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdir(0x0, 0x54) chdir(0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r1, &(0x7f0000000300)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x78, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "aea4621b8b6a303c12e870461c1def78b71964a15e9cbd7c38de4d345499b914", "fb677c98f0bb5462049c4f9188be12fa", {"a09c4c605dbbff5d31e66115929d79ef", "ed01cfed55c3e489ead40edb102ab0b3"}}}}}}, 0x82) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) munlockall() 33.255646519s ago: executing program 5 (id=658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], 0x0, 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r3, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 32.241663565s ago: executing program 5 (id=663): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 31.762561032s ago: executing program 4 (id=665): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r3, 0x0, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}], 0x0}, 0x20) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 31.204454712s ago: executing program 5 (id=666): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x8, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) unshare(0x22020400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xfffffffb, 0x4c, 0x0, 0x0) 30.679148307s ago: executing program 5 (id=668): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r3, 0x0, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 29.432072271s ago: executing program 2 (id=673): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r6, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x818) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x33fe0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 29.379219565s ago: executing program 0 (id=241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdir(0x0, 0x54) chdir(0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r1, &(0x7f0000000300)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x78, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "aea4621b8b6a303c12e870461c1def78b71964a15e9cbd7c38de4d345499b914", "fb677c98f0bb5462049c4f9188be12fa", {"a09c4c605dbbff5d31e66115929d79ef", "ed01cfed55c3e489ead40edb102ab0b3"}}}}}}, 0x82) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) munlockall() 27.877276602s ago: executing program 4 (id=675): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$nfs(&(0x7f00000001c0)='\xd1\xaey\x99\xb3\xd72\"/\xadN\x80\xf0\xc4Fj[\xfeC\xf4,\t[\x02\xca~\x06\x95\xea\x99\x1e\xb5\x8e\xe4\x82y-\xd9\xf1\x90\x91I\xb9\x00\xe3\xef\v\x14\xef\xe0b+\t\'\xe4\xb6B CL\x94i\xfe\x99\x88\xbf\xbdeY\xe3S\xb1\x0e\xe4\xdf\x1dd\xdb\x9e\xc1\x1d\x938JQ\x94)\xa3\x80\xe0f\x8cW5\x18p\xd5\xce\xcc\xf7\x94\xc3\x8aO\xe4>\x96o\x9c-\xf6Cw\x84~\xe3zu\x9aP&Sel$<\xf1\xcbk40x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 27.674350647s ago: executing program 4 (id=677): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x8, 0x4) 27.540718032s ago: executing program 2 (id=678): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0xa8, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x448}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0xff, 0xda}}}}}]}}]}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.2880367s ago: executing program 5 (id=680): r0 = userfaultfd(0x80001) r1 = socket$alg(0x26, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) bind$alg(r1, &(0x7f0000001180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80800) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0xeed, &(0x7f0000000780)={0x0, 0x8b7e, 0x10000, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x3, 0x5, 0x7}, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x43c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 26.28747715s ago: executing program 4 (id=681): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="008fcb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f00000009c0)={0x20, 0xb, 0x21, "788a4a87661b48b4e42c874f9b0547daa3b75664688592736104b1e09032ad93f1"}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x85, 0x4, 0x7}, 0x0, 0x0, 0x0}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) 25.391989898s ago: executing program 2 (id=683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) 25.35966079s ago: executing program 5 (id=684): syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2, 0x80000000}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 25.001794195s ago: executing program 4 (id=686): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r3, 0x0, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}], 0x0}, 0x20) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 24.963118403s ago: executing program 2 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) 22.104207339s ago: executing program 2 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 20.500276298s ago: executing program 2 (id=690): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r3, 0x0, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 17.355301495s ago: executing program 3 (id=694): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat2(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 17.275148502s ago: executing program 3 (id=695): open(0x0, 0x14507e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28404, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 16.416077546s ago: executing program 3 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) connect$caif(r3, &(0x7f0000000940)=@dgm={0x25, 0xa}, 0x18) 15.521357546s ago: executing program 3 (id=697): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="ae174f0a41bf2d03a938bc08b18ed6", 0xf}], 0x1) sendto(r0, &(0x7f0000001340)="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", 0x8d7, 0x45000, 0x0, 0x0) 15.442969481s ago: executing program 3 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) 15.363462919s ago: executing program 3 (id=700): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x18900) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6}, 0xfffffffffffffdd9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f00000007c0), &(0x7f00000000c0)=""/76}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 10.017729724s ago: executing program 33 (id=684): syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2, 0x80000000}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.988200893s ago: executing program 34 (id=686): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r3, 0x0, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}], 0x0}, 0x20) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 5.012249024s ago: executing program 35 (id=690): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r3, 0x0, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 0s ago: executing program 36 (id=700): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x18900) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6}, 0xfffffffffffffdd9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f00000007c0), &(0x7f00000000c0)=""/76}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): ng as an active interface with an up link [ 95.627092][ T2975] bond0: (slave syz_tun): interface is now down [ 95.656001][ T53] bond0: (slave syz_tun): interface is now down [ 95.665176][ T53] bond0: now running without any active interface! [ 95.666336][ T1200] usb 3-1: USB disconnect, device number 4 [ 95.694781][ T5903] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.739383][ T6415] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 95.750114][ T6415] kvm: requested 151695 ns i8254 timer period limited to 200000 ns [ 95.760096][ T6415] kvm: requested 70400 ns i8254 timer period limited to 200000 ns [ 95.854770][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 95.866781][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.867276][ T30] audit: type=1400 audit(1745134940.447:296): avc: denied { getopt } for pid=6426 comm="syz.1.174" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.882552][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.924610][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.933776][ T5903] usb 1-1: Product: syz [ 95.938060][ T5903] usb 1-1: Manufacturer: syz [ 95.942660][ T5903] usb 1-1: SerialNumber: syz [ 95.949909][ T5903] usb 1-1: config 0 descriptor?? [ 95.969537][ T5903] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.984547][ T5903] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 96.088359][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.256245][ T5874] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.282586][ T5874] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.295557][ T5874] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.304844][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.316780][ T6425] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.327372][ T5874] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.053275][ T5903] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 97.351901][ T5874] usb 4-1: USB disconnect, device number 3 [ 97.438433][ T30] audit: type=1400 audit(1745134942.017:297): avc: denied { write } for pid=6442 comm="syz.1.179" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.674310][ T5903] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 97.730940][ T5903] em28xx 1-1:0.0: board has no eeprom [ 97.838829][ T30] audit: type=1400 audit(1745134942.417:298): avc: denied { create } for pid=6449 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.368432][ T30] audit: type=1400 audit(1745134942.947:299): avc: denied { mounton } for pid=6465 comm="syz.2.185" path="/36/file0" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 98.832505][ T6413] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 98.924534][ T5903] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 98.941988][ T5903] em28xx 1-1:0.0: dvb set to bulk mode. [ 98.957790][ T5874] em28xx 1-1:0.0: Binding DVB extension [ 99.037291][ T5903] usb 1-1: USB disconnect, device number 3 [ 99.090196][ T5903] em28xx 1-1:0.0: Disconnecting em28xx [ 99.227068][ T5874] em28xx 1-1:0.0: Registering input extension [ 99.286514][ T5903] em28xx 1-1:0.0: Closing input extension [ 99.345798][ T5903] em28xx 1-1:0.0: Freeing device [ 99.647635][ T6483] xt_nat: multiple ranges no longer supported [ 100.049515][ T30] audit: type=1400 audit(1745134944.207:300): avc: denied { execute } for pid=6473 comm="syz.1.196" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.861729][ T30] audit: type=1400 audit(1745134945.297:301): avc: denied { create } for pid=6487 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 100.967704][ T6490] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 100.976097][ T30] audit: type=1400 audit(1745134945.327:302): avc: denied { connect } for pid=6487 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 101.137553][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.150276][ T6494] ip6erspan0: entered promiscuous mode [ 101.160899][ T6494] bond1: (slave ip6erspan0): making interface the new active one [ 101.203243][ T6502] netlink: 120 bytes leftover after parsing attributes in process `syz.4.194'. [ 101.214206][ T6494] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 101.706409][ T30] audit: type=1400 audit(1745134946.287:303): avc: denied { name_bind } for pid=6513 comm="syz.0.201" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 101.741696][ T6516] process 'syz.2.200' launched './file1' with NULL argv: empty string added [ 101.750655][ T30] audit: type=1400 audit(1745134946.317:304): avc: denied { read } for pid=6513 comm="syz.0.201" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.834717][ T30] audit: type=1400 audit(1745134946.347:305): avc: denied { execute_no_trans } for pid=6515 comm="syz.2.200" path="/37/file1" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.852560][ T30] audit: type=1400 audit(1745134946.427:306): avc: denied { ioctl } for pid=6511 comm="syz.4.199" path="socket:[11378]" dev="sockfs" ino=11378 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.990155][ T6519] Zero length message leads to an empty skb [ 102.003780][ T30] audit: type=1400 audit(1745134946.557:307): avc: denied { map } for pid=6511 comm="syz.4.199" path="socket:[11386]" dev="sockfs" ino=11386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.183747][ T6529] kvm: pic: level sensitive irq not supported [ 102.419599][ T30] audit: type=1400 audit(1745134946.567:308): avc: denied { sqpoll } for pid=6511 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.242485][ T30] audit: type=1400 audit(1745134947.437:309): avc: denied { write } for pid=6539 comm="syz.0.209" name="tcp6" dev="proc" ino=4026533442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.286889][ T6544] netlink: 'syz.2.202': attribute type 2 has an invalid length. [ 103.598646][ T30] audit: type=1400 audit(1745134948.177:310): avc: denied { read } for pid=6546 comm="syz.1.210" path="socket:[10483]" dev="sockfs" ino=10483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.935646][ T5837] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 104.944695][ T5837] Bluetooth: hci1: Injecting HCI hardware error event [ 104.972268][ T5836] Bluetooth: hci1: hardware error 0x00 [ 105.177364][ T6568] netlink: 'syz.0.218': attribute type 12 has an invalid length. [ 105.485152][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.735615][ T5902] usb 1-1: config 0 has no interfaces? [ 105.753174][ T5902] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.784076][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.796489][ T5902] usb 1-1: Product: syz [ 105.801247][ T5902] usb 1-1: Manufacturer: syz [ 105.808601][ T5902] usb 1-1: SerialNumber: syz [ 105.818501][ T5902] usb 1-1: config 0 descriptor?? [ 106.390623][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 106.390637][ T30] audit: type=1400 audit(1745134950.967:318): avc: denied { connect } for pid=6587 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.450041][ T30] audit: type=1400 audit(1745134950.967:319): avc: denied { write } for pid=6587 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.653822][ T30] audit: type=1400 audit(1745134951.227:320): avc: denied { listen } for pid=6578 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.732098][ T30] audit: type=1400 audit(1745134951.237:321): avc: denied { accept } for pid=6578 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.931192][ T30] audit: type=1400 audit(1745134951.507:322): avc: denied { setopt } for pid=6601 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.192324][ T5836] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 107.648717][ T30] audit: type=1400 audit(1745134952.167:323): avc: denied { connect } for pid=6611 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.694344][ T6616] netfs: Couldn't get user pages (rc=-14) [ 108.402289][ T1200] usb 1-1: USB disconnect, device number 4 [ 108.747248][ T30] audit: type=1400 audit(1745134953.317:324): avc: denied { connect } for pid=6627 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.837114][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.942499][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.082453][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.103545][ T30] audit: type=1400 audit(1745134953.677:325): avc: denied { setopt } for pid=6633 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.127537][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 109.138688][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.242'. [ 109.266774][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 109.280391][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.309396][ T30] audit: type=1400 audit(1745134953.887:326): avc: denied { write } for pid=6638 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 109.330725][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.346657][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.354938][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.368264][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.379062][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.399219][ T30] audit: type=1400 audit(1745134953.977:327): avc: denied { mounton } for pid=6642 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 109.583634][ T13] bridge_slave_1: left allmulticast mode [ 109.591121][ T13] bridge_slave_1: left promiscuous mode [ 109.598881][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.610509][ T13] bridge_slave_0: left allmulticast mode [ 109.618495][ T13] bridge_slave_0: left promiscuous mode [ 109.624280][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.277475][ T13] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 111.207412][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.269654][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.301718][ T13] bond0 (unregistering): Released all slaves [ 111.395201][ T13] bond1 (unregistering): Released all slaves [ 111.494680][ T5837] Bluetooth: hci0: command tx timeout [ 111.660824][ T30] audit: type=1400 audit(1745134956.237:328): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.668402][ T6684] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 111.710841][ T30] audit: type=1400 audit(1745134956.257:329): avc: denied { read } for pid=5490 comm="dhcpcd" name="n100" dev="tmpfs" ino=2668 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.741659][ T6642] chnl_net:caif_netlink_parms(): no params data found [ 111.883982][ T30] audit: type=1400 audit(1745134956.257:330): avc: denied { open } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2668 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.911843][ T30] audit: type=1400 audit(1745134956.257:331): avc: denied { getattr } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2668 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.107007][ T30] audit: type=1400 audit(1745134956.667:332): avc: denied { read } for pid=6692 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.426289][ T30] audit: type=1400 audit(1745134956.677:333): avc: denied { open } for pid=6692 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.799906][ T30] audit: type=1400 audit(1745134956.687:334): avc: denied { getattr } for pid=6692 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.116499][ T30] audit: type=1400 audit(1745134957.697:335): avc: denied { create } for pid=6701 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.156027][ T30] audit: type=1400 audit(1745134957.717:336): avc: denied { listen } for pid=6701 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.590643][ T5837] Bluetooth: hci0: command tx timeout [ 113.716628][ T30] audit: type=1400 audit(1745134958.277:337): avc: denied { write } for pid=6687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.810925][ T13] hsr_slave_0: left promiscuous mode [ 113.889430][ T13] hsr_slave_1: left promiscuous mode [ 114.481622][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.501522][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.713181][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.781892][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.307703][ T13] veth1_macvtap: left promiscuous mode [ 115.313938][ T13] veth0_macvtap: left promiscuous mode [ 115.326789][ T13] veth1_vlan: left promiscuous mode [ 115.345078][ T13] veth0_vlan: left promiscuous mode [ 115.654836][ T5837] Bluetooth: hci0: command tx timeout [ 116.256124][ T13] team0 (unregistering): Port device team_slave_1 removed [ 116.299522][ T13] team0 (unregistering): Port device team_slave_0 removed [ 116.576896][ T6753] capability: warning: `syz.3.267' uses deprecated v2 capabilities in a way that may be insecure [ 116.729998][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.755682][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.762941][ T6642] bridge_slave_0: entered allmulticast mode [ 116.879546][ T6642] bridge_slave_0: entered promiscuous mode [ 116.929370][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.482727][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.634184][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 117.634209][ T30] audit: type=1400 audit(1745134962.077:345): avc: denied { read } for pid=6758 comm="syz.2.269" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 117.734652][ T5837] Bluetooth: hci0: command tx timeout [ 118.512576][ T6642] bridge_slave_1: entered allmulticast mode [ 118.519854][ T6642] bridge_slave_1: entered promiscuous mode [ 118.544616][ T30] audit: type=1400 audit(1745134962.077:346): avc: denied { open } for pid=6758 comm="syz.2.269" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 118.832922][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.890683][ T30] audit: type=1400 audit(1745134963.467:347): avc: denied { read write } for pid=6768 comm="syz.2.273" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.926793][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.954024][ T30] audit: type=1400 audit(1745134963.467:348): avc: denied { open } for pid=6768 comm="syz.2.273" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.979016][ T30] audit: type=1400 audit(1745134963.467:349): avc: denied { ioctl } for pid=6768 comm="syz.2.273" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.085209][ T6771] syz.1.270: attempt to access beyond end of device [ 119.085209][ T6771] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 119.144714][ T5902] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.251043][ T30] audit: type=1400 audit(1745134963.647:350): avc: denied { mounton } for pid=6761 comm="syz.1.270" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 119.409730][ T5902] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 119.422945][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.480086][ T6642] team0: Port device team_slave_0 added [ 119.504567][ T5902] usb 3-1: config 0 has no interface number 0 [ 119.529837][ T5902] usb 3-1: config 0 interface 217 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 119.533528][ T6642] team0: Port device team_slave_1 added [ 119.627863][ T5902] usb 3-1: config 0 interface 217 has no altsetting 0 [ 119.665255][ T30] audit: type=1400 audit(1745134964.227:351): avc: denied { name_connect } for pid=6779 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 119.696217][ T5902] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=5b.03 [ 119.714559][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.737897][ T30] audit: type=1400 audit(1745134964.267:352): avc: denied { listen } for pid=6779 comm="syz.4.277" lport=36991 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.739461][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.761623][ T5902] usb 3-1: Product: syz [ 119.798631][ T5902] usb 3-1: Manufacturer: syz [ 119.803260][ T5902] usb 3-1: SerialNumber: syz [ 119.833865][ T30] audit: type=1400 audit(1745134964.287:353): avc: denied { name_bind } for pid=6781 comm="syz.1.278" path="socket:[10948]" dev="sockfs" ino=10948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.859449][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.888952][ T5902] usb 3-1: config 0 descriptor?? [ 119.898476][ T30] audit: type=1400 audit(1745134964.347:354): avc: denied { accept } for pid=6779 comm="syz.4.277" lport=36991 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.955566][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.988745][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.001839][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.060332][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.130960][ T5902] kvaser_usb 3-1:0.217: error -ENODEV: Cannot get usb endpoint(s) [ 120.152285][ T5902] usb 3-1: USB disconnect, device number 5 [ 120.201262][ T6642] hsr_slave_0: entered promiscuous mode [ 120.219029][ T6642] hsr_slave_1: entered promiscuous mode [ 120.237681][ T6642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.290167][ T6642] Cannot create hsr debugfs directory [ 123.820224][ T6642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.887622][ T30] audit: type=1400 audit(1745134968.467:355): avc: denied { ioctl } for pid=6851 comm="syz.2.287" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.942073][ T6642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.964396][ T6642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.974225][ T6642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.167434][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.180721][ T30] audit: type=1400 audit(1745134968.537:356): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.202864][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.241519][ T30] audit: type=1400 audit(1745134968.537:357): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.323010][ T6642] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.529806][ T30] audit: type=1400 audit(1745134968.537:358): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.406942][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.414611][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.810126][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.817287][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.078582][ T6875] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 129.307354][ T6889] netlink: 'syz.2.295': attribute type 2 has an invalid length. [ 130.003404][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.153911][ T6642] veth0_vlan: entered promiscuous mode [ 130.270894][ T6642] veth1_vlan: entered promiscuous mode [ 130.931279][ T6642] veth0_macvtap: entered promiscuous mode [ 130.953033][ T6922] overlayfs: failed to clone upperpath [ 130.976351][ T6642] veth1_macvtap: entered promiscuous mode [ 131.011168][ T6921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.057285][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.105073][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.124744][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.170336][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.196766][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.216072][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.228054][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.270700][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.282130][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.292242][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.303144][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.314111][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.789598][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.800680][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.823246][ T6642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.833362][ T6642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.842676][ T6642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.853168][ T6642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.001998][ T30] audit: type=1400 audit(1745134976.577:359): avc: denied { create } for pid=6941 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.379338][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.757316][ T6663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.773480][ T6663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.776035][ T5836] Bluetooth: hci0: command 0x0405 tx timeout [ 132.999001][ T6956] program syz.1.306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.222498][ T30] audit: type=1400 audit(1745134977.557:360): avc: denied { read } for pid=6954 comm="syz.1.306" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 133.271738][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.281795][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.291193][ T30] audit: type=1400 audit(1745134977.557:361): avc: denied { open } for pid=6954 comm="syz.1.306" path="/dev/sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 133.431496][ T30] audit: type=1400 audit(1745134978.007:362): avc: denied { mounton } for pid=6642 comm="syz-executor" path="/root/syzkaller.rWRhe4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 133.531320][ T30] audit: type=1400 audit(1745134978.057:363): avc: denied { mount } for pid=6642 comm="syz-executor" name="/" dev="gadgetfs" ino=7349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 133.570290][ T6964] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 133.576919][ T6964] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 133.652394][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.308'. [ 133.664024][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'. [ 133.679612][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.308'. [ 133.717071][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.308'. [ 134.240156][ T6669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.375061][ T6669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.538390][ T6669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.655873][ T6669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.714620][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.844402][ T30] audit: type=1400 audit(1745134979.417:364): avc: denied { name_bind } for pid=7003 comm="syz.4.317" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 134.891996][ T5872] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 134.900653][ T5872] usb 2-1: config 0 has no interface number 0 [ 134.914793][ T5872] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 134.942065][ T5872] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 134.966881][ T5872] usb 2-1: config 0 interface 255 has no altsetting 0 [ 134.972558][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.976259][ T5872] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 134.995309][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.996811][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.011651][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.013188][ T5872] usb 2-1: config 0 descriptor?? [ 135.031919][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.033164][ T5872] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 135.040969][ T6669] bridge_slave_1: left allmulticast mode [ 135.064231][ T6669] bridge_slave_1: left promiscuous mode [ 135.073936][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.088480][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.119290][ T6669] bridge_slave_0: left allmulticast mode [ 135.217135][ T6669] bridge_slave_0: left promiscuous mode [ 135.227258][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.085126][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.126893][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.179593][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.192563][ T6669] bond0 (unregistering): Released all slaves [ 137.224244][ T5902] usb 2-1: USB disconnect, device number 3 [ 137.254576][ T5836] Bluetooth: hci0: command tx timeout [ 137.286450][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.304505][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.314710][ T5872] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 137.323741][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.402699][ T5872] usb 3-1: config 0 descriptor?? [ 137.860059][ T5872] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 137.921388][ T5872] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 137.982723][ T5872] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 138.002356][ T6669] hsr_slave_0: left promiscuous mode [ 138.014913][ T5872] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 138.042497][ T5872] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 138.050267][ T6669] hsr_slave_1: left promiscuous mode [ 138.056363][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.073805][ T5872] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 138.085584][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.117261][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.144766][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.170200][ T6669] veth1_macvtap: left promiscuous mode [ 138.262499][ T5872] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 83 [ 138.263694][ T6669] veth0_macvtap: left promiscuous mode [ 138.280788][ T6669] veth1_vlan: left promiscuous mode [ 138.287292][ T6669] veth0_vlan: left promiscuous mode [ 138.289017][ T5872] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 138.302233][ T5872] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 138.917404][ T5872] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 138.977311][ T5872] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 139.029896][ T5872] usb 3-1: USB disconnect, device number 6 [ 139.344693][ T5836] Bluetooth: hci0: command tx timeout [ 139.420212][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 139.448177][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 139.999231][ T7007] chnl_net:caif_netlink_parms(): no params data found [ 140.034509][ T30] audit: type=1400 audit(1745134984.597:365): avc: denied { write } for pid=7105 comm="syz.1.337" path="socket:[13074]" dev="sockfs" ino=13074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.658556][ T30] audit: type=1400 audit(1745134985.207:366): avc: denied { write } for pid=7123 comm="syz.3.340" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.894679][ T970] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 141.146164][ T970] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.217005][ T970] usb 4-1: not running at top speed; connect to a high speed hub [ 141.245207][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.266087][ T30] audit: type=1400 audit(1745134985.847:367): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 141.267733][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.304331][ T970] usb 4-1: config 1 interface 0 has no altsetting 0 [ 141.325737][ T7007] bridge_slave_0: entered allmulticast mode [ 141.350652][ T970] usb 4-1: New USB device found, idVendor=2453, idProduct=0100, bcdDevice= 0.40 [ 141.361642][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.373322][ T970] usb 4-1: Product: syz [ 141.378208][ T970] usb 4-1: SerialNumber: syz [ 141.383942][ T7007] bridge_slave_0: entered promiscuous mode [ 141.414891][ T5836] Bluetooth: hci0: command tx timeout [ 141.426594][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.491788][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.509472][ T30] audit: type=1400 audit(1745134986.087:368): avc: denied { map } for pid=7139 comm="syz.2.343" path="/67/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.518039][ T7140] netfs: Couldn't get user pages (rc=-14) [ 141.549358][ T7007] bridge_slave_1: entered allmulticast mode [ 141.576851][ T7007] bridge_slave_1: entered promiscuous mode [ 141.589919][ T30] audit: type=1400 audit(1745134986.167:369): avc: denied { getopt } for pid=7144 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.619566][ T7140] netfs: Zero-sized read [R=5] [ 141.728167][ T970] usbhid 4-1:1.0: can't add hid device: -71 [ 141.734159][ T970] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 141.744290][ T970] usb 4-1: USB disconnect, device number 4 [ 141.891291][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.401673][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.052479][ T7007] team0: Port device team_slave_0 added [ 143.087363][ T7007] team0: Port device team_slave_1 added [ 143.093783][ T7173] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 143.154260][ T7176] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 143.209641][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 143.212906][ T7177] bond1: (slave gretap1): making interface the new active one [ 143.228207][ T7177] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.272952][ T7176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.292572][ T7176] ip6erspan0: entered promiscuous mode [ 143.301133][ T7176] bond2: (slave ip6erspan0): making interface the new active one [ 143.310269][ T7176] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 143.322108][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.329492][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.355678][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.371375][ T7173] bond1 (unregistering): (slave gretap1): Releasing active interface [ 143.381159][ T7173] bond1 (unregistering): Released all slaves [ 143.413758][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.423335][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.455771][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.511930][ T5836] Bluetooth: hci0: command tx timeout [ 143.565868][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 143.597669][ T7007] hsr_slave_0: entered promiscuous mode [ 143.605231][ T7007] hsr_slave_1: entered promiscuous mode [ 143.612371][ T7007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.657942][ T7007] Cannot create hsr debugfs directory [ 143.666159][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 143.845144][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'. [ 146.681117][ T7007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.723171][ T7007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.761726][ T7007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.128069][ T7007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.403967][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.467654][ T7007] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.499278][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.506410][ T6663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.566448][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.573554][ T6663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.004084][ T30] audit: type=1400 audit(1745134992.577:370): avc: denied { connect } for pid=7288 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.031796][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.106306][ T7007] veth0_vlan: entered promiscuous mode [ 148.118882][ T7007] veth1_vlan: entered promiscuous mode [ 148.273238][ T7007] veth0_macvtap: entered promiscuous mode [ 148.749051][ T30] audit: type=1400 audit(1745134992.887:371): avc: denied { write } for pid=7288 comm="syz.4.374" path="socket:[14411]" dev="sockfs" ino=14411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.882281][ T7007] veth1_macvtap: entered promiscuous mode [ 149.131251][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.639031][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.745761][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.771186][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.079059][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.094583][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.105953][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.118673][ T30] audit: type=1400 audit(1745134994.407:372): avc: denied { name_connect } for pid=7302 comm="syz.2.376" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 150.227059][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.271759][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.314542][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.444522][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.456772][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.996178][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.031951][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 151.041774][ T30] audit: type=1400 audit(1745134995.607:373): avc: denied { nlmsg_read } for pid=7317 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.064595][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.087345][ T7007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.104234][ T7007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.114901][ T7007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.123603][ T7007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.341212][ T6670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.366652][ T6670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.379427][ T6671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.436617][ T6671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.089075][ T30] audit: type=1326 audit(1745134996.667:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b36b85127 code=0x7ffc0000 [ 152.197080][ T30] audit: type=1326 audit(1745134996.697:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b36b2a359 code=0x7ffc0000 [ 152.224889][ T5902] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.346645][ T30] audit: type=1326 audit(1745134996.697:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b36b8e169 code=0x7ffc0000 [ 152.385958][ T30] audit: type=1326 audit(1745134996.697:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b36b85127 code=0x7ffc0000 [ 152.434800][ T30] audit: type=1326 audit(1745134996.697:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b36b2a359 code=0x7ffc0000 [ 152.458307][ T30] audit: type=1326 audit(1745134996.697:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b36b85127 code=0x7ffc0000 [ 152.506094][ T5902] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 152.558970][ T5902] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 152.571460][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 152.595724][ T5902] usb 4-1: Product: syz [ 152.603271][ T5902] usb 4-1: Manufacturer: syz [ 152.617551][ T5902] usb 4-1: SerialNumber: syz [ 152.635420][ T5902] usb 4-1: config 0 descriptor?? [ 153.011792][ T6670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.660977][ T5902] usb 4-1: USB disconnect, device number 5 [ 154.041423][ T6670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.442379][ T6670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.493811][ T7379] xt_hashlimit: size too large, truncated to 1048576 [ 154.535258][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 154.535281][ T30] audit: type=1400 audit(1745134999.087:395): avc: denied { ioctl } for pid=7372 comm="syz.1.391" path="/88/file0/file0" dev="fuse" ino=0 ioctlcmd=0x545d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 154.623257][ T6670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.773545][ T30] audit: type=1400 audit(1745134999.087:396): avc: denied { bind } for pid=7372 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.915195][ T7390] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 154.967200][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.980260][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.988118][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.996254][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.004079][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.143252][ T6670] bridge_slave_1: left allmulticast mode [ 155.158885][ T6670] bridge_slave_1: left promiscuous mode [ 155.198077][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.247780][ T6670] bridge_slave_0: left allmulticast mode [ 155.253434][ T6670] bridge_slave_0: left promiscuous mode [ 155.283521][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.145732][ T7424] hub 9-0:1.0: USB hub found [ 156.151900][ T7424] hub 9-0:1.0: 1 port detected [ 156.201490][ T7399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.867559][ T6670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.293475][ T5837] Bluetooth: hci0: command tx timeout [ 157.352677][ T6670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.363021][ T6670] bond0 (unregistering): Released all slaves [ 158.178660][ T7391] chnl_net:caif_netlink_parms(): no params data found [ 158.323075][ T6670] hsr_slave_0: left promiscuous mode [ 158.354511][ T6670] hsr_slave_1: left promiscuous mode [ 158.367615][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.391337][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.432820][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.449655][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.655386][ T6670] veth1_macvtap: left promiscuous mode [ 158.663612][ T6670] veth0_macvtap: left promiscuous mode [ 158.683936][ T6670] veth1_vlan: left promiscuous mode [ 158.709624][ T6670] veth0_vlan: left promiscuous mode [ 158.737593][ T30] audit: type=1400 audit(1745135003.297:397): avc: denied { ioctl } for pid=7460 comm="syz.3.413" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.281637][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.291187][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.351229][ T5836] Bluetooth: hci0: command tx timeout [ 159.827147][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.902678][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.918321][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.184948][ T30] audit: type=1400 audit(1745135004.767:398): avc: denied { name_bind } for pid=7484 comm="syz.4.418" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 160.632407][ T30] audit: type=1400 audit(1745135005.217:399): avc: denied { read write } for pid=7493 comm="syz.2.420" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.776621][ T30] audit: type=1400 audit(1745135005.217:400): avc: denied { open } for pid=7493 comm="syz.2.420" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.908034][ T6670] team0 (unregistering): Port device team_slave_1 removed [ 161.030149][ T6670] team0 (unregistering): Port device team_slave_0 removed [ 161.426476][ T5836] Bluetooth: hci0: command tx timeout [ 161.974778][ T5836] Bluetooth: hci2: command tx timeout [ 162.255497][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.285029][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.319590][ T7391] bridge_slave_0: entered allmulticast mode [ 162.743576][ T7391] bridge_slave_0: entered promiscuous mode [ 162.758963][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.767847][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.775292][ T7391] bridge_slave_1: entered allmulticast mode [ 162.782672][ T7391] bridge_slave_1: entered promiscuous mode [ 163.366516][ T7391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.471535][ T7391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.494637][ T5836] Bluetooth: hci0: command tx timeout [ 163.550891][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 163.586834][ T7391] team0: Port device team_slave_0 added [ 163.627025][ T7391] team0: Port device team_slave_1 added [ 163.775111][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.065527][ T5836] Bluetooth: hci2: command tx timeout [ 164.259697][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.291761][ T7391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.369554][ T6670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.389673][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.401496][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.436491][ T7391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.484238][ T6670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.540227][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.571779][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.664329][ T7472] bridge_slave_0: entered allmulticast mode [ 164.683337][ T7472] bridge_slave_0: entered promiscuous mode [ 164.820652][ T7391] hsr_slave_0: entered promiscuous mode [ 165.012701][ T7391] hsr_slave_1: entered promiscuous mode [ 165.025249][ T7391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.032823][ T7391] Cannot create hsr debugfs directory [ 165.071356][ T6670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.114394][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.146138][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.153946][ T7472] bridge_slave_1: entered allmulticast mode [ 165.167977][ T7472] bridge_slave_1: entered promiscuous mode [ 165.401466][ T6670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.523144][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.613682][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.664548][ T970] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 165.817347][ T970] usb 3-1: config 0 has no interfaces? [ 165.823213][ T970] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 165.884267][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.935705][ T30] audit: type=1400 audit(1745135010.517:401): avc: denied { bind } for pid=7576 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.962615][ T970] usb 3-1: config 0 descriptor?? [ 166.049589][ T7472] team0: Port device team_slave_0 added [ 166.139513][ T5836] Bluetooth: hci2: command tx timeout [ 166.149265][ T7472] team0: Port device team_slave_1 added [ 166.364569][ T9] usb 3-1: USB disconnect, device number 7 [ 166.662190][ T6670] bridge_slave_1: left allmulticast mode [ 166.669817][ T6670] bridge_slave_1: left promiscuous mode [ 166.676132][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.717122][ T6670] bridge_slave_0: left allmulticast mode [ 166.730027][ T6670] bridge_slave_0: left promiscuous mode [ 166.738012][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.028434][ T5903] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.125516][ T6670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.195744][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 167.276298][ T6670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.276455][ T5903] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 167.294879][ T5903] usb 4-1: config 0 has no interface number 0 [ 167.302622][ T6670] bond0 (unregistering): Released all slaves [ 167.324573][ T5903] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 167.333813][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.339441][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.344329][ T5903] usb 4-1: Product: syz [ 167.367876][ T5903] usb 4-1: Manufacturer: syz [ 167.372493][ T5903] usb 4-1: SerialNumber: syz [ 167.382789][ T5903] usb 4-1: config 0 descriptor?? [ 167.400792][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.429302][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.431813][ T5903] smsc95xx v2.0.0 [ 167.522178][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.531235][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.561345][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.772299][ T7472] hsr_slave_0: entered promiscuous mode [ 167.783973][ T7472] hsr_slave_1: entered promiscuous mode [ 167.797784][ T7472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.810415][ T7472] Cannot create hsr debugfs directory [ 167.862720][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 167.876268][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 167.891959][ T6670] hsr_slave_0: left promiscuous mode [ 167.900792][ T6670] hsr_slave_1: left promiscuous mode [ 167.909986][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.920295][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.929732][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.942341][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.963887][ T6670] veth1_macvtap: left promiscuous mode [ 167.970279][ T6670] veth0_macvtap: left promiscuous mode [ 167.978827][ T6670] veth1_vlan: left promiscuous mode [ 167.984183][ T6670] veth0_vlan: left promiscuous mode [ 168.217099][ T5836] Bluetooth: hci2: command tx timeout [ 168.237922][ T6670] team0 (unregistering): Port device team_slave_1 removed [ 168.264925][ T6670] team0 (unregistering): Port device team_slave_0 removed [ 168.659861][ T7391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.672004][ T7391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.696722][ T7391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.721693][ T7391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.848893][ T7472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.876551][ T7472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.893537][ T7472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.911149][ T7472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.985935][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.028762][ T7391] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.054389][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.061491][ T6666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.226836][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.233999][ T6663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.810402][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.851831][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.883841][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.891013][ T6663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.953365][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.960546][ T6666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.232744][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 170.253109][ T5903] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 170.269043][ T5903] usb 4-1: USB disconnect, device number 6 [ 170.706722][ T7391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.804028][ T7391] veth0_vlan: entered promiscuous mode [ 170.849111][ T7391] veth1_vlan: entered promiscuous mode [ 171.047445][ T7391] veth0_macvtap: entered promiscuous mode [ 171.058128][ T7391] veth1_macvtap: entered promiscuous mode [ 171.116810][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.149905][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.168967][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.181815][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.200938][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.519229][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.566893][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.584028][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.623203][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.651307][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.686878][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.698196][ T7391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.724684][ T7391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.776867][ T7391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.785773][ T7391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.993992][ T6671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.032579][ T6671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.152453][ T6663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.194446][ T6663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.264344][ T7472] veth0_vlan: entered promiscuous mode [ 172.265788][ T30] audit: type=1800 audit(1745135016.837:402): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.453" name="/" dev="9p" ino=2 res=0 errno=0 [ 172.308567][ T7472] veth1_vlan: entered promiscuous mode [ 172.401854][ T7472] veth0_macvtap: entered promiscuous mode [ 172.428660][ T7472] veth1_macvtap: entered promiscuous mode [ 172.483485][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.529335][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.556566][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.582201][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.605883][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.624775][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.648834][ T7717] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 172.656606][ T7717] netlink: 224 bytes leftover after parsing attributes in process `syz.2.458'. [ 172.678345][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.708247][ T30] audit: type=1400 audit(1745135017.267:403): avc: denied { write } for pid=7712 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.730714][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.824844][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.838174][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.849245][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.865334][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.878569][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.891100][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.913645][ T7472] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.939668][ T7472] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.951653][ T7472] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.961860][ T7472] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.162164][ T6672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.191882][ T6672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.307678][ T6672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.348432][ T6672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.608669][ T6669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.747629][ T6669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.814621][ T5874] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.844264][ T6669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.927999][ T6669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.986312][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.004532][ T5874] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.034618][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.060937][ T5874] usb 4-1: config 0 descriptor?? [ 174.157691][ T6669] bridge_slave_1: left allmulticast mode [ 174.163394][ T6669] bridge_slave_1: left promiscuous mode [ 174.206768][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.468951][ T30] audit: type=1400 audit(1745135019.047:404): avc: denied { ioctl } for pid=7756 comm="syz.2.464" path="socket:[17010]" dev="sockfs" ino=17010 ioctlcmd=0x8b18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 174.921661][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 174.941769][ T6669] bridge_slave_0: left allmulticast mode [ 174.950042][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 174.959886][ T6669] bridge_slave_0: left promiscuous mode [ 174.981384][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.990065][ T7769] netlink: 'syz.4.465': attribute type 15 has an invalid length. [ 175.000281][ T5874] usb 4-1: USB disconnect, device number 7 [ 175.028323][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.465'. [ 175.478118][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.491040][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.498754][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.509278][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.517706][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.695814][ T30] audit: type=1400 audit(1745135020.267:405): avc: denied { setrlimit } for pid=7786 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 176.038376][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.068639][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.087241][ T6669] bond0 (unregistering): Released all slaves [ 176.114356][ T7762] warning: `syz.2.464' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.245795][ T30] audit: type=1400 audit(1745135020.827:406): avc: denied { accept } for pid=7804 comm="syz.2.468" path="socket:[17133]" dev="sockfs" ino=17133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.712984][ T30] audit: type=1400 audit(1745135020.987:407): avc: denied { override_creds } for pid=7806 comm="syz.5.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 176.888839][ T7812] ======================================================= [ 176.888839][ T7812] WARNING: The mand mount option has been deprecated and [ 176.888839][ T7812] and is ignored by this kernel. Remove the mand [ 176.888839][ T7812] option from the mount to silence this warning. [ 176.888839][ T7812] ======================================================= [ 176.960893][ T30] audit: type=1400 audit(1745135021.537:408): avc: denied { mount } for pid=7811 comm="syz.2.472" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 177.096258][ T30] audit: type=1400 audit(1745135021.667:409): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 177.574583][ T5836] Bluetooth: hci0: command tx timeout [ 177.877459][ T7820] syz_tun: entered allmulticast mode [ 177.884389][ T7824] syz_tun: left allmulticast mode [ 178.305108][ T6669] hsr_slave_0: left promiscuous mode [ 178.319000][ T6669] hsr_slave_1: left promiscuous mode [ 178.328381][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.335689][ T7844] evm: overlay not supported [ 178.342338][ T30] audit: type=1804 audit(1745135022.907:410): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.487" name="/newroot/4/bus/file1" dev="overlay" ino=46 res=1 errno=0 [ 178.344560][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.861127][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.868587][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.909678][ T6669] veth1_macvtap: left promiscuous mode [ 178.921604][ T6669] veth0_macvtap: left promiscuous mode [ 178.927638][ T6669] veth1_vlan: left promiscuous mode [ 179.102359][ T6669] veth0_vlan: left promiscuous mode [ 179.564929][ T7861] fuse: Bad value for 'fd' [ 179.654563][ T55] Bluetooth: hci0: command tx timeout [ 180.960498][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 180.967983][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 181.235663][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 181.442681][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 181.735315][ T5836] Bluetooth: hci0: command tx timeout [ 181.804966][ T7779] chnl_net:caif_netlink_parms(): no params data found [ 181.924049][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.933916][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.941472][ T7779] bridge_slave_0: entered allmulticast mode [ 181.951356][ T7779] bridge_slave_0: entered promiscuous mode [ 181.963837][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.971293][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.983046][ T7779] bridge_slave_1: entered allmulticast mode [ 181.995487][ T7779] bridge_slave_1: entered promiscuous mode [ 182.021740][ T7779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.032953][ T7779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.061002][ T7779] team0: Port device team_slave_0 added [ 182.079386][ T7779] team0: Port device team_slave_1 added [ 182.109701][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.117295][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.143656][ T7779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.161237][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.171275][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.201627][ T7779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.250649][ T7779] hsr_slave_0: entered promiscuous mode [ 182.257272][ T7779] hsr_slave_1: entered promiscuous mode [ 182.263866][ T7779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.272829][ T7779] Cannot create hsr debugfs directory [ 183.171213][ T970] IPVS: starting estimator thread 0... [ 183.264596][ T7921] IPVS: using max 78 ests per chain, 187200 per kthread [ 183.312127][ T7922] vlan2: entered promiscuous mode [ 183.319700][ T7922] ip6gretap0: entered promiscuous mode [ 183.815392][ T5836] Bluetooth: hci0: command tx timeout [ 183.842530][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 183.949377][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 184.052238][ T7779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.068044][ T7779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.090163][ T7779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.152028][ T7779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.379471][ T30] audit: type=1400 audit(1745135028.957:411): avc: denied { create } for pid=7953 comm="syz.5.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 184.433778][ T7779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.498654][ T7779] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.512333][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.519474][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.609836][ T30] audit: type=1400 audit(1745135029.177:412): avc: denied { create } for pid=7952 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.828036][ T30] audit: type=1400 audit(1745135029.187:413): avc: denied { getopt } for pid=7952 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.940205][ T7779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.985888][ T7779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.032968][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.040116][ T6666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.220125][ T30] audit: type=1400 audit(1745135029.797:414): avc: denied { shutdown } for pid=7967 comm="syz.3.506" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.489788][ T30] audit: type=1400 audit(1745135030.067:415): avc: denied { getopt } for pid=7981 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.554902][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'. [ 186.015054][ T30] audit: type=1400 audit(1745135030.597:416): avc: denied { create } for pid=7997 comm="syz.5.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 186.034445][ T7779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.617414][ T30] audit: type=1400 audit(1745135030.617:417): avc: denied { ioctl } for pid=7997 comm="syz.5.508" path="socket:[19884]" dev="sockfs" ino=19884 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 187.165350][ T7779] veth0_vlan: entered promiscuous mode [ 187.691746][ T7779] veth1_vlan: entered promiscuous mode [ 187.939001][ T7779] veth0_macvtap: entered promiscuous mode [ 187.952638][ T7779] veth1_macvtap: entered promiscuous mode [ 187.980352][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.994142][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.012657][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.034024][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.059981][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.073832][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.086858][ T7779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.121115][ T30] audit: type=1400 audit(1745135032.697:418): avc: denied { connect } for pid=8025 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.122106][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.190291][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.200373][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.215938][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.226159][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.236633][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.251110][ T7779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.272516][ T8031] syz.2.516 uses obsolete (PF_INET,SOCK_PACKET) [ 188.295973][ T7779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.305087][ T7779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.321432][ T7779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.337861][ T7779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.579297][ T30] audit: type=1400 audit(1745135033.147:419): avc: denied { watch } for pid=8039 comm="syz.4.518" path="/139" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 188.641368][ T6671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.653999][ T6671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.743539][ T6671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.783555][ T6671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.878347][ T30] audit: type=1400 audit(1745135033.457:420): avc: denied { connect } for pid=8047 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.434296][ T6671] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.482710][ T8084] bridge_slave_0: left allmulticast mode [ 190.519384][ T8084] bridge_slave_0: left promiscuous mode [ 190.530222][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.568980][ T8084] bridge_slave_1: left allmulticast mode [ 190.580143][ T8084] bridge_slave_1: left promiscuous mode [ 190.592756][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.629903][ T8084] bond0: (slave bond_slave_0): Releasing backup interface [ 190.662309][ T8084] bond0: (slave bond_slave_1): Releasing backup interface [ 190.681788][ T8084] team0: Port device team_slave_0 removed [ 190.691951][ T8084] team0: Port device team_slave_1 removed [ 190.700232][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.708316][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.716757][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.724136][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.738690][ T8084] bond2: (slave ip6erspan0): Releasing active interface [ 190.756172][ T6671] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.890965][ T6671] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.997750][ T6671] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.117799][ T6671] bridge_slave_1: left allmulticast mode [ 191.123482][ T6671] bridge_slave_1: left promiscuous mode [ 191.129322][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.138444][ T6671] bridge_slave_0: left allmulticast mode [ 191.144075][ T6671] bridge_slave_0: left promiscuous mode [ 191.150883][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.538245][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.546692][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.558244][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.566597][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.574142][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.900953][ T6671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.939962][ T6671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.968381][ T6671] bond0 (unregistering): Released all slaves [ 191.991133][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.537'. [ 192.236480][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 192.491682][ T6671] hsr_slave_0: left promiscuous mode [ 192.511827][ T6671] hsr_slave_1: left promiscuous mode [ 192.541335][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.584520][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.614740][ T5902] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 192.634403][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.660363][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.693851][ T6671] veth1_macvtap: left promiscuous mode [ 192.728883][ T6671] veth0_macvtap: left promiscuous mode [ 192.740996][ T6671] veth1_vlan: left promiscuous mode [ 192.756569][ T6671] veth0_vlan: left promiscuous mode [ 192.808291][ T5902] usb 6-1: config 64 has an invalid descriptor of length 45, skipping remainder of the config [ 192.839757][ T5902] usb 6-1: config 64 has 0 interfaces, different from the descriptor's value: 1 [ 192.867068][ T5902] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 192.877701][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.897898][ T5902] usb 6-1: Product: syz [ 192.904588][ T5872] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.917132][ T5902] usb 6-1: Manufacturer: syz [ 192.927802][ T5902] usb 6-1: SerialNumber: syz [ 192.970778][ T30] audit: type=1400 audit(1745135037.547:421): avc: denied { associate } for pid=8170 comm="syz.4.544" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 192.992830][ T30] audit: type=1400 audit(1745135037.547:422): avc: denied { mounton } for pid=8170 comm="syz.4.544" path="/file0" dev="rootfs" ino=19212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 193.084498][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 193.099174][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.128810][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.149496][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 193.203641][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.225089][ T5872] usb 4-1: config 0 descriptor?? [ 193.240525][ T5872] hub 4-1:0.0: USB hub found [ 193.316995][ T30] audit: type=1400 audit(1745135037.887:423): avc: denied { nlmsg_read } for pid=8172 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 193.464967][ T5872] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 193.615255][ T6671] team0 (unregistering): Port device team_slave_1 removed [ 193.641717][ T6671] team0 (unregistering): Port device team_slave_0 removed [ 193.657642][ T5837] Bluetooth: hci0: command tx timeout [ 193.823753][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.905586][ T5872] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 193.941067][ T30] audit: type=1400 audit(1745135038.517:424): avc: denied { ioctl } for pid=8147 comm="syz.5.540" path="socket:[19180]" dev="sockfs" ino=19180 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.199938][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 194.247037][ T9] usb 4-1: USB disconnect, device number 8 [ 194.411209][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.426854][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.444168][ T8129] bridge_slave_0: entered allmulticast mode [ 194.464096][ T8129] bridge_slave_0: entered promiscuous mode [ 194.495268][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.543049][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.550409][ T8129] bridge_slave_1: entered allmulticast mode [ 194.560544][ T8129] bridge_slave_1: entered promiscuous mode [ 194.757134][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.865513][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.549'. [ 194.940357][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.549'. [ 195.037657][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.321120][ T8129] team0: Port device team_slave_0 added [ 195.329230][ T8129] team0: Port device team_slave_1 added [ 195.649066][ T8214] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 195.737538][ T5837] Bluetooth: hci0: command tx timeout [ 195.973391][ T9] usb 6-1: USB disconnect, device number 2 [ 196.218676][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.230808][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.281362][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.413837][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.423178][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.999514][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.023053][ T8236] 9pnet_fd: Insufficient options for proto=fd [ 197.175638][ T8129] hsr_slave_0: entered promiscuous mode [ 197.181885][ T8129] hsr_slave_1: entered promiscuous mode [ 197.188991][ T8129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.202631][ T8129] Cannot create hsr debugfs directory [ 197.814653][ T5837] Bluetooth: hci0: command tx timeout [ 198.694535][ T30] audit: type=1400 audit(1745135043.267:425): avc: denied { listen } for pid=8272 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.820728][ T30] audit: type=1400 audit(1745135043.277:426): avc: denied { accept } for pid=8272 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.124953][ T8129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.299069][ T8129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.326270][ T8287] trusted_key: syz.4.569 sent an empty control message without MSG_MORE. [ 199.779097][ T30] audit: type=1400 audit(1745135043.977:427): avc: denied { setopt } for pid=8284 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.846853][ T8129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.924970][ T5837] Bluetooth: hci0: command tx timeout [ 199.952165][ T8129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.026699][ T30] audit: type=1400 audit(1745135044.857:428): avc: denied { write } for pid=8296 comm="syz.2.572" path="socket:[20647]" dev="sockfs" ino=20647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.350117][ T8306] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 201.528550][ T30] audit: type=1400 audit(1745135046.107:429): avc: denied { write } for pid=8310 comm="syz.2.573" lport=46335 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 201.567790][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 201.578999][ T8306] bond2: entered promiscuous mode [ 201.584047][ T8306] bond2: entered allmulticast mode [ 201.622544][ T30] audit: type=1400 audit(1745135046.127:430): avc: denied { setopt } for pid=8310 comm="syz.2.573" lport=46335 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 201.664201][ T8307] ip6gretap1: entered allmulticast mode [ 202.545414][ T8307] bond2: (slave ip6gretap1): making interface the new active one [ 202.601924][ T8307] ip6gretap1: entered promiscuous mode [ 202.624928][ T8307] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 202.645857][ T8314] bond2: left promiscuous mode [ 202.650864][ T8314] ip6gretap1: left promiscuous mode [ 202.684072][ T8314] bond2: left allmulticast mode [ 202.690176][ T8314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.318519][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.605493][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.634009][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.641101][ T6671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.707057][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.714239][ T6671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.921516][ T8129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.199828][ T8367] overlayfs: failed to clone upperpath [ 206.765454][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.901581][ T8129] veth0_vlan: entered promiscuous mode [ 206.959205][ T8129] veth1_vlan: entered promiscuous mode [ 207.000959][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.590'. [ 207.221338][ T8129] veth0_macvtap: entered promiscuous mode [ 207.321531][ T8129] veth1_macvtap: entered promiscuous mode [ 207.574711][ T30] audit: type=1400 audit(1745135052.087:431): avc: denied { read } for pid=8402 comm="syz.3.594" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 207.689036][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.590'. [ 208.170195][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.211248][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.594'. [ 208.221210][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.594'. [ 208.236672][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.244540][ T30] audit: type=1400 audit(1745135052.097:432): avc: denied { open } for pid=8402 comm="syz.3.594" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 208.258156][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.290432][ T30] audit: type=1400 audit(1745135052.817:433): avc: denied { bind } for pid=8395 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.321039][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.341558][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.383860][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.442596][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.453131][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.467152][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.479073][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.491005][ T8129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.553701][ T8129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.589113][ T8129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.680996][ T8129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.828916][ T8426] netlink: 'syz.5.598': attribute type 4 has an invalid length. [ 208.970596][ T8430] netlink: 'syz.5.598': attribute type 4 has an invalid length. [ 209.267308][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.310142][ T30] audit: type=1400 audit(1745135053.867:434): avc: denied { setopt } for pid=8436 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 209.410180][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.815803][ T8451] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 209.835635][ T6672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.881657][ T8451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.905995][ T8456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.918639][ T6672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.990787][ T8456] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 210.091413][ T8456] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 210.359722][ T8451] ip6erspan0: entered promiscuous mode [ 210.397013][ T8451] bond1: (slave ip6erspan0): making interface the new active one [ 210.485623][ T8451] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 210.975669][ T6669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.267508][ T6669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.488631][ T6669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.628464][ T6669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.799147][ T5902] kernel write not supported for file /snd/seq (pid: 5902 comm: kworker/1:6) [ 212.937435][ T8512] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.607'. [ 212.946965][ T8512] netlink: zone id is out of range [ 212.987421][ T6669] bridge_slave_1: left allmulticast mode [ 212.993061][ T6669] bridge_slave_1: left promiscuous mode [ 213.002467][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.023756][ T6669] bridge_slave_0: left allmulticast mode [ 213.033434][ T6669] bridge_slave_0: left promiscuous mode [ 213.044656][ T5902] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 213.049604][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.175495][ T5874] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 213.184791][ T5902] usb 6-1: device descriptor read/64, error -71 [ 213.354988][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 213.377522][ T5874] usb 4-1: config 0 has no interfaces? [ 213.383156][ T5874] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 213.398141][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.408235][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.417199][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.425723][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.436885][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.445737][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.462442][ T5874] usb 4-1: config 0 descriptor?? [ 213.469256][ T5902] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 213.639412][ T5902] usb 6-1: device descriptor read/64, error -71 [ 213.708078][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.719901][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.730032][ T6669] bond0 (unregistering): Released all slaves [ 213.754823][ T5902] usb usb6-port1: attempt power cycle [ 213.757943][ T5874] usb 4-1: USB disconnect, device number 9 [ 214.107224][ T6669] hsr_slave_0: left promiscuous mode [ 214.129174][ T6669] hsr_slave_1: left promiscuous mode [ 214.135039][ T5902] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 214.135937][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.151011][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.169001][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.177891][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.192050][ T5902] usb 6-1: device descriptor read/8, error -71 [ 214.217927][ T6669] veth1_macvtap: left promiscuous mode [ 214.224870][ T6669] veth0_macvtap: left promiscuous mode [ 214.230983][ T6669] veth1_vlan: left promiscuous mode [ 214.238704][ T6669] veth0_vlan: left promiscuous mode [ 214.534754][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 214.590501][ T5902] usb 6-1: device descriptor read/8, error -71 [ 215.119889][ T5902] usb usb6-port1: unable to enumerate USB device [ 215.533478][ T5837] Bluetooth: hci0: command tx timeout [ 216.538340][ T8572] netlink: 36 bytes leftover after parsing attributes in process `syz.5.618'. [ 216.556739][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.618'. [ 216.607601][ T8572] netlink: 36 bytes leftover after parsing attributes in process `syz.5.618'. [ 216.660750][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 216.668249][ T8572] netlink: 36 bytes leftover after parsing attributes in process `syz.5.618'. [ 216.873879][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 217.574575][ T5837] Bluetooth: hci0: command tx timeout [ 217.812597][ T8524] chnl_net:caif_netlink_parms(): no params data found [ 217.947612][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.956572][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.963765][ T8524] bridge_slave_0: entered allmulticast mode [ 217.972718][ T8524] bridge_slave_0: entered promiscuous mode [ 217.983883][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.991518][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.000352][ T8524] bridge_slave_1: entered allmulticast mode [ 218.007846][ T8524] bridge_slave_1: entered promiscuous mode [ 218.063974][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.078315][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.112773][ T8524] team0: Port device team_slave_0 added [ 218.120400][ T8524] team0: Port device team_slave_1 added [ 218.142015][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.151779][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.193021][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.208091][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.215961][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.249644][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.302892][ T8524] hsr_slave_0: entered promiscuous mode [ 218.313110][ T8524] hsr_slave_1: entered promiscuous mode [ 218.322077][ T8524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.337612][ T8524] Cannot create hsr debugfs directory [ 219.602903][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 219.664129][ T8630] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.673455][ T8630] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.682497][ T8630] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.691466][ T8630] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.700346][ T5837] Bluetooth: hci0: command tx timeout [ 219.701241][ T8630] vxlan0: entered promiscuous mode [ 219.769743][ T8524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.788799][ T8524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.803312][ T8524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.823270][ T8524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.036791][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.421155][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.468563][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.475736][ T6666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.514795][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.521889][ T6670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.569991][ T8665] netlink: 'syz.3.635': attribute type 4 has an invalid length. [ 221.672784][ T8669] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 221.706359][ T8669] qnx6: wrong signature (magic) in superblock #1. [ 221.716147][ T8675] netlink: 24 bytes leftover after parsing attributes in process `syz.5.636'. [ 221.732386][ T8669] qnx6: unable to read the first superblock [ 221.738686][ T5837] Bluetooth: hci0: command tx timeout [ 221.858425][ T8679] netlink: 'syz.5.636': attribute type 1 has an invalid length. [ 222.080911][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.214045][ T8524] veth0_vlan: entered promiscuous mode [ 222.269025][ T8524] veth1_vlan: entered promiscuous mode [ 222.276330][ T8687] input: syz0 as /devices/virtual/input/input6 [ 222.296715][ T30] audit: type=1400 audit(1745135066.867:435): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=2813 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.319127][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.353530][ T30] audit: type=1400 audit(1745135066.867:436): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2813 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.367563][ T8524] veth0_macvtap: entered promiscuous mode [ 222.431069][ T8524] veth1_macvtap: entered promiscuous mode [ 222.473957][ T30] audit: type=1400 audit(1745135066.877:437): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2813 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.520170][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.552600][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.563427][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.577120][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.588570][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.601730][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.613001][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.676935][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.704904][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.728671][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.752422][ T8524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.780261][ T8707] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 222.791667][ T8524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.814768][ T8524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.843310][ T8524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.878058][ T8706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.921328][ T30] audit: type=1400 audit(1745135067.497:438): avc: denied { read } for pid=8711 comm="syz.2.644" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 222.990034][ T30] audit: type=1400 audit(1745135067.497:439): avc: denied { open } for pid=8711 comm="syz.2.644" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 223.038498][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.114620][ T5837] Bluetooth: hci4: unexpected event for opcode 0x200a [ 223.183511][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 223.311147][ T8735] tipc: Enabling of bearer rejected, failed to enable media [ 223.404941][ T8739] netlink: 'syz.4.650': attribute type 3 has an invalid length. [ 223.413675][ T8739] netlink: 'syz.4.650': attribute type 3 has an invalid length. [ 223.788701][ T8712] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 223.828069][ T8718] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.949754][ T8718] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.012181][ T8718] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.030331][ T8718] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 224.040479][ T8718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.046709][ T8718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.068853][ T8718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.090670][ T8718] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.158894][ T6672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.179991][ T6672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.374971][ T6670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.423874][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 224.437023][ T6670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.501390][ T5871] kernel read not supported for file /rfkill (pid: 5871 comm: kworker/0:3) [ 224.634579][ T30] audit: type=1400 audit(1745135069.197:440): avc: denied { read } for pid=8772 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.671871][ T30] audit: type=1400 audit(1745135069.247:441): avc: denied { ioctl } for pid=8772 comm="syz.4.659" path="socket:[23870]" dev="sockfs" ino=23870 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.730559][ T30] audit: type=1400 audit(1745135069.307:442): avc: denied { read } for pid=8774 comm="syz.2.660" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 224.762147][ T30] audit: type=1400 audit(1745135069.307:443): avc: denied { open } for pid=8774 comm="syz.2.660" path="/144/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 224.906407][ T8775] md2: using deprecated bitmap file support [ 225.040689][ T8775] md2: error: bitmap file must be a regular file [ 225.090602][ T30] audit: type=1400 audit(1745135069.307:444): avc: denied { ioctl } for pid=8774 comm="syz.2.660" path="/144/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 225.160407][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 225.177494][ T8768] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 225.185009][ T8768] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 225.445949][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 226.054733][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.060837][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 226.068419][ T8768] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 226.104630][ T8768] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 227.356665][ T8768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.362683][ T8768] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 228.421971][ T6670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.451008][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 228.452093][ T30] audit: type=1400 audit(1745135073.027:449): avc: denied { mount } for pid=8843 comm="syz.3.672" name="/" dev="ramfs" ino=23068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 228.562376][ T30] audit: type=1400 audit(1745135073.027:450): avc: denied { mounton } for pid=8843 comm="syz.3.672" path="/143/file0" dev="ramfs" ino=23068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 228.660615][ T30] audit: type=1400 audit(1745135073.087:451): avc: denied { remount } for pid=8843 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 228.683392][ T6670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.826635][ T6670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.954498][ T6670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.219830][ T6670] bridge_slave_1: left allmulticast mode [ 229.284204][ T6670] bridge_slave_1: left promiscuous mode [ 229.293724][ T30] audit: type=1400 audit(1745135073.867:452): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 229.333099][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 229.343993][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.369225][ T6670] bridge_slave_0: left allmulticast mode [ 229.386983][ T6670] bridge_slave_0: left promiscuous mode [ 229.392782][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.937409][ T6670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.962210][ T6670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.991399][ T6670] bond0 (unregistering): Released all slaves [ 230.084738][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.096348][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.112062][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.123578][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.138686][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.151036][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.197221][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.204940][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.215606][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.228313][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.524177][ T8901] tipc: Started in network mode [ 230.535111][ T8901] tipc: Node identity 4, cluster identity 4711 [ 231.395275][ T8901] tipc: Node number set to 4 [ 231.473104][ T30] audit: type=1400 audit(1745135076.047:453): avc: denied { read } for pid=8908 comm="syz.5.680" name="mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 231.522113][ T30] audit: type=1400 audit(1745135076.047:454): avc: denied { open } for pid=8908 comm="syz.5.680" path="/dev/input/mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 231.737160][ T6670] hsr_slave_0: left promiscuous mode [ 231.769834][ T6670] hsr_slave_1: left promiscuous mode [ 231.812433][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.836591][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.846337][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.288806][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.313474][ T5837] Bluetooth: hci0: command tx timeout [ 232.317148][ T6670] veth1_macvtap: left promiscuous mode [ 232.353659][ T6670] veth0_macvtap: left promiscuous mode [ 232.359896][ T6670] veth1_vlan: left promiscuous mode [ 232.384682][ T6670] veth0_vlan: left promiscuous mode [ 232.653381][ T8937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8937 comm=syz.2.683 [ 232.855178][ T5875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 233.054774][ T30] audit: type=1400 audit(1745135077.617:455): avc: denied { setopt } for pid=8941 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.400407][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 233.411852][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.423188][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.439078][ T5875] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 233.449827][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.374700][ T5837] Bluetooth: hci0: command tx timeout [ 235.761802][ T30] audit: type=1400 audit(1745135080.337:456): avc: denied { watch } for pid=8951 comm="syz.2.698" path="/155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.806492][ T30] audit: type=1400 audit(1745135080.337:457): avc: denied { watch_sb watch_reads } for pid=8951 comm="syz.2.698" path="/155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.472500][ T5837] Bluetooth: hci0: command tx timeout [ 237.638049][ T30] audit: type=1400 audit(1745135082.217:458): avc: denied { create } for pid=8970 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 238.587089][ T5837] Bluetooth: hci0: command tx timeout [ 241.534609][ T30] audit: type=1400 audit(1745135086.097:459): avc: denied { setopt } for pid=8988 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 242.333407][ T8995] xt_bpf: check failed: parse error [ 243.217766][ T8996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.939328][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.948124][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.955763][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.955906][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.969919][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 247.971252][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.984880][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.994078][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.001256][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.010796][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.054672][ T5836] Bluetooth: hci6: command tx timeout [ 250.054834][ T55] Bluetooth: hci5: command tx timeout [ 252.134517][ T55] Bluetooth: hci6: command tx timeout [ 252.144659][ T55] Bluetooth: hci5: command tx timeout [ 252.833890][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.844773][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.853131][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.861392][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.868971][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.224705][ T55] Bluetooth: hci5: command tx timeout [ 254.224748][ T5836] Bluetooth: hci6: command tx timeout [ 254.934626][ T5836] Bluetooth: hci7: command tx timeout [ 255.257798][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.294753][ T5836] Bluetooth: hci5: command tx timeout [ 256.294765][ T55] Bluetooth: hci6: command tx timeout [ 257.014814][ T5836] Bluetooth: hci7: command tx timeout [ 257.845106][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 257.854709][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 257.864698][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 257.872427][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 257.880843][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 259.104614][ T55] Bluetooth: hci7: command tx timeout [ 259.894625][ T55] Bluetooth: hci8: command tx timeout [ 261.184658][ T55] Bluetooth: hci7: command tx timeout [ 261.974699][ T55] Bluetooth: hci8: command tx timeout [ 264.055028][ T55] Bluetooth: hci8: command tx timeout [ 266.144710][ T55] Bluetooth: hci8: command tx timeout [ 290.721720][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 290.730429][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 290.738200][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 290.746524][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 290.753925][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 292.774627][ T55] Bluetooth: hci9: command tx timeout [ 294.854540][ T55] Bluetooth: hci9: command tx timeout [ 296.934530][ T55] Bluetooth: hci9: command tx timeout [ 299.014522][ T55] Bluetooth: hci9: command tx timeout [ 308.029780][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 308.038512][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 308.046447][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 308.055267][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 308.063481][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 308.072382][ T5826] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 308.082003][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 308.095379][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 308.104091][ T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 308.112228][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 310.134617][ T5837] Bluetooth: hci10: command tx timeout [ 310.134622][ T55] Bluetooth: hci11: command tx timeout [ 312.215176][ T55] Bluetooth: hci11: command tx timeout [ 312.215182][ T5837] Bluetooth: hci10: command tx timeout [ 312.916434][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 312.925433][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 312.933009][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 312.941790][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 312.949356][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 314.294677][ T5837] Bluetooth: hci10: command tx timeout [ 314.300732][ T55] Bluetooth: hci11: command tx timeout [ 315.015289][ T55] Bluetooth: hci12: command tx timeout [ 316.374784][ T55] Bluetooth: hci11: command tx timeout [ 316.375242][ T5837] Bluetooth: hci10: command tx timeout [ 316.701457][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.104522][ T5837] Bluetooth: hci12: command tx timeout [ 317.925636][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 317.933992][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 317.942517][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 317.950693][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 317.958589][ T55] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 319.174500][ T5837] Bluetooth: hci12: command tx timeout [ 319.984588][ T5837] Bluetooth: hci13: command tx timeout [ 321.254567][ T5837] Bluetooth: hci12: command tx timeout [ 322.064598][ T5837] Bluetooth: hci13: command tx timeout [ 324.135402][ T5837] Bluetooth: hci13: command tx timeout [ 326.214616][ T5837] Bluetooth: hci13: command tx timeout [ 351.898163][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 351.908390][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 351.916132][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 351.924584][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 351.932108][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 353.974738][ T5837] Bluetooth: hci14: command tx timeout [ 354.617241][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 356.054523][ T55] Bluetooth: hci14: command tx timeout [ 358.134526][ T55] Bluetooth: hci14: command tx timeout [ 360.214642][ T55] Bluetooth: hci14: command tx timeout [ 368.099074][ T5837] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 368.109273][ T5837] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 368.119354][ T9051] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 368.123797][ T5826] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 368.134868][ T5826] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 368.136129][ T9051] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 368.142512][ T5826] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 368.158550][ T5826] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 368.158951][ T9051] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 368.166373][ T5826] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 370.214508][ T55] Bluetooth: hci16: command tx timeout [ 370.224618][ T55] Bluetooth: hci15: command tx timeout [ 372.294537][ T5826] Bluetooth: hci16: command tx timeout [ 372.294552][ T55] Bluetooth: hci15: command tx timeout [ 372.993923][ T5826] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 373.002515][ T5826] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 373.010484][ T5826] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 373.022751][ T5826] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 373.034881][ T5826] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 374.374635][ T55] Bluetooth: hci16: command tx timeout [ 374.385129][ T55] Bluetooth: hci15: command tx timeout [ 375.098865][ T55] Bluetooth: hci17: command tx timeout [ 375.098865][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 375.104355][ T5826] Bluetooth: hci7: command 0x0406 tx timeout [ 375.110721][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 376.454580][ T5836] Bluetooth: hci16: command tx timeout [ 376.454588][ T9059] Bluetooth: hci15: command tx timeout [ 377.174535][ T5836] Bluetooth: hci17: command tx timeout [ 377.997908][ T9059] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 378.006496][ T9059] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 378.014323][ T9059] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 378.022845][ T9059] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 378.030679][ T9059] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 378.139304][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.254558][ T5836] Bluetooth: hci17: command tx timeout [ 380.054675][ T5836] Bluetooth: hci18: command tx timeout [ 380.057125][ T31] INFO: task kdevtmpfs:26 blocked for more than 143 seconds. [ 380.067764][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 380.075691][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.084343][ T31] task:kdevtmpfs state:D stack:26440 pid:26 tgid:26 ppid:2 task_flags:0x208140 flags:0x00004000 [ 380.096412][ T31] Call Trace: [ 380.099668][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 380.102581][ T31] __schedule+0x116f/0x5de0 [ 380.107544][ T31] ? __pfx___schedule+0x10/0x10 [ 380.112412][ T31] ? find_held_lock+0x2b/0x80 [ 380.117608][ T31] ? schedule+0x2d7/0x3a0 [ 380.134803][ T31] schedule+0xe7/0x3a0 [ 380.138896][ T31] schedule_timeout+0x257/0x290 [ 380.143744][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 380.174315][ T31] ? mark_held_locks+0x49/0x80 [ 380.179412][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.184902][ T31] __wait_for_common+0x2fc/0x4e0 [ 380.189837][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 380.195463][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 380.201528][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.206775][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 380.212579][ T31] ? check_flush_dependency.part.0+0x114/0x340 [ 380.218236][ T5836] Bluetooth: hci8: command 0x0406 tx timeout [ 380.219033][ T31] __flush_workqueue+0x3e2/0x1230 [ 380.229702][ T31] ? rcu_is_watching+0x12/0xc0 [ 380.234552][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 380.240015][ T31] ? __mutex_lock+0x1ca/0xb90 [ 380.244779][ T31] md_alloc+0x30/0x1080 [ 380.248946][ T31] md_probe+0x6e/0xd0 [ 380.252924][ T31] ? __pfx_md_probe+0x10/0x10 [ 380.257666][ T31] blk_probe_dev+0x116/0x1a0 [ 380.262255][ T31] blk_request_module+0x16/0xb0 [ 380.267114][ T31] blkdev_get_no_open+0x7a/0xe0 [ 380.271955][ T31] bdev_statx+0x98/0x5c0 [ 380.276236][ T31] vfs_getattr_nosec+0x38d/0x430 [ 380.281174][ T31] ? __pfx_shmem_getattr+0x10/0x10 [ 380.286444][ T31] vfs_getattr+0x4a/0x60 [ 380.290679][ T31] handle_remove+0x12e/0x6f0 [ 380.295427][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.300639][ T31] ? __pfx_handle_remove+0x10/0x10 [ 380.305883][ T31] ? trace_sched_exit_tp+0xde/0x130 [ 380.311081][ T31] ? __schedule+0x1186/0x5de0 [ 380.315951][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 380.320881][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 380.326170][ T31] ? find_held_lock+0x2b/0x80 [ 380.330846][ T31] ? devtmpfs_work_loop+0xe1/0x900 [ 380.336058][ T31] devtmpfs_work_loop+0x350/0x900 [ 380.341089][ T31] ? __pfx_devtmpfs_work_loop+0x10/0x10 [ 380.346687][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 380.352493][ T31] ? try_to_wake_up+0x157/0x1680 [ 380.357519][ T31] ? rcu_is_watching+0x12/0xc0 [ 380.362284][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 380.368117][ T31] ? __pfx_devtmpfsd+0x10/0x10 [ 380.372877][ T31] devtmpfsd+0x4c/0x50 [ 380.377130][ T31] kthread+0x3c2/0x780 [ 380.381190][ T31] ? __pfx_kthread+0x10/0x10 [ 380.385805][ T31] ? __pfx_kthread+0x10/0x10 [ 380.390396][ T31] ? __pfx_kthread+0x10/0x10 [ 380.395005][ T31] ? __pfx_kthread+0x10/0x10 [ 380.399582][ T31] ? rcu_is_watching+0x12/0xc0 [ 380.404335][ T31] ? __pfx_kthread+0x10/0x10 [ 380.409000][ T31] ret_from_fork+0x45/0x80 [ 380.413411][ T31] ? __pfx_kthread+0x10/0x10 [ 380.418056][ T31] ret_from_fork_asm+0x1a/0x30 [ 380.422824][ T31] [ 380.427172][ T31] INFO: task dhcpcd:5490 blocked for more than 143 seconds. [ 380.435887][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 380.443517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.452210][ T31] task:dhcpcd state:D stack:23144 pid:5490 tgid:5490 ppid:5489 task_flags:0x400140 flags:0x00000002 [ 380.464176][ T31] Call Trace: [ 380.467469][ T31] [ 380.470389][ T31] __schedule+0x116f/0x5de0 [ 380.474938][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 380.479866][ T31] ? __pfx___schedule+0x10/0x10 [ 380.484766][ T31] ? find_held_lock+0x2b/0x80 [ 380.489438][ T31] ? schedule+0x2d7/0x3a0 [ 380.493742][ T31] schedule+0xe7/0x3a0 [ 380.497839][ T31] schedule_preempt_disabled+0x13/0x30 [ 380.503296][ T31] __mutex_lock+0x6c7/0xb90 [ 380.507837][ T31] ? cred_has_capability.isra.0+0x193/0x2f0 [ 380.513736][ T31] ? devinet_ioctl+0x26d/0x1f50 [ 380.518643][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 380.523668][ T31] ? bpf_lsm_capable+0x9/0x10 [ 380.528351][ T31] ? security_capable+0x7e/0x260 [ 380.533282][ T31] ? devinet_ioctl+0x26d/0x1f50 [ 380.538307][ T31] devinet_ioctl+0x26d/0x1f50 [ 380.542971][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 380.548095][ T31] ? _copy_from_user+0x59/0xd0 [ 380.552854][ T31] inet_ioctl+0x3a7/0x3f0 [ 380.557202][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 380.562066][ T31] ? tomoyo_path_number_perm+0x18d/0x580 [ 380.567709][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 380.573592][ T31] sock_do_ioctl+0x115/0x280 [ 380.578204][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 380.583314][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 380.589834][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 380.596386][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 380.603235][ T31] sock_ioctl+0x227/0x6b0 [ 380.607585][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 380.612439][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 380.618040][ T31] ? selinux_file_ioctl+0x180/0x270 [ 380.623235][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 380.628373][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 380.633232][ T31] __x64_sys_ioctl+0x190/0x200 [ 380.638053][ T31] do_syscall_64+0xcd/0x260 [ 380.642567][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.648637][ T31] RIP: 0033:0x7f7caaea1d49 [ 380.653044][ T31] RSP: 002b:00007fffd1586548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.661479][ T31] RAX: ffffffffffffffda RBX: 00007f7caadd36c0 RCX: 00007f7caaea1d49 [ 380.669458][ T31] RDX: 00007fffd1596738 RSI: 0000000000008914 RDI: 0000000000000020 [ 380.677443][ T31] RBP: 00007fffd15a68f8 R08: 00007fffd15966f8 R09: 00007fffd15966a8 [ 380.685430][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.693388][ T31] R13: 00007fffd1596738 R14: 0000000000000028 R15: 0000000000008914 [ 380.702026][ T31] [ 380.705308][ T31] INFO: task kworker/1:5:5875 blocked for more than 144 seconds. [ 380.713009][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 380.720675][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.729354][ T31] task:kworker/1:5 state:D stack:26264 pid:5875 tgid:5875 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 380.741367][ T31] Workqueue: usb_hub_wq hub_event [ 380.746413][ T31] Call Trace: [ 380.749667][ T31] [ 380.752573][ T31] __schedule+0x116f/0x5de0 [ 380.757267][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 380.762211][ T31] ? __pfx___schedule+0x10/0x10 [ 380.767102][ T31] ? find_held_lock+0x2b/0x80 [ 380.771798][ T31] ? schedule+0x2d7/0x3a0 [ 380.776328][ T31] schedule+0xe7/0x3a0 [ 380.780396][ T31] schedule_timeout+0x257/0x290 [ 380.785524][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 380.790909][ T31] ? mark_held_locks+0x49/0x80 [ 380.795715][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.800904][ T31] __wait_for_common+0x2fc/0x4e0 [ 380.805865][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 380.811242][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 380.816742][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 380.821940][ T31] devtmpfs_submit_req+0xa8/0x100 [ 380.826981][ T31] devtmpfs_create_node+0x18a/0x230 [ 380.832192][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 380.837952][ T31] ? up_write+0x1b2/0x520 [ 380.842281][ T31] ? kernfs_create_link+0x1bd/0x240 [ 380.847520][ T31] ? kernfs_put+0x35/0x60 [ 380.851840][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 380.857415][ T31] device_add+0x10bd/0x1a70 [ 380.861912][ T31] ? __pfx_device_add+0x10/0x10 [ 380.866890][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 380.872621][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 380.878609][ T31] usb_new_device+0xd07/0x1a20 [ 380.883377][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 380.888426][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 380.893629][ T31] ? mark_held_locks+0x49/0x80 [ 380.898445][ T31] hub_event+0x2eb7/0x4fa0 [ 380.902884][ T31] ? __pfx_hub_event+0x10/0x10 [ 380.907663][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 380.913296][ T31] ? rcu_is_watching+0x12/0xc0 [ 380.918089][ T31] process_one_work+0x9cc/0x1b70 [ 380.923039][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 380.928344][ T31] ? __pfx_process_one_work+0x10/0x10 [ 380.933712][ T31] ? assign_work+0x1a0/0x250 [ 380.938335][ T31] worker_thread+0x6c8/0xf10 [ 380.942920][ T31] ? __kthread_parkme+0x19e/0x250 [ 380.947957][ T31] ? __pfx_worker_thread+0x10/0x10 [ 380.953061][ T31] kthread+0x3c2/0x780 [ 380.957173][ T31] ? __pfx_kthread+0x10/0x10 [ 380.961757][ T31] ? __pfx_kthread+0x10/0x10 [ 380.966362][ T31] ? __pfx_kthread+0x10/0x10 [ 380.970939][ T31] ? __pfx_kthread+0x10/0x10 [ 380.975561][ T31] ? rcu_is_watching+0x12/0xc0 [ 380.980319][ T31] ? __pfx_kthread+0x10/0x10 [ 380.985073][ T31] ret_from_fork+0x45/0x80 [ 380.989482][ T31] ? __pfx_kthread+0x10/0x10 [ 380.994048][ T31] ret_from_fork_asm+0x1a/0x30 [ 380.998860][ T31] [ 381.001874][ T31] INFO: task kworker/0:6:5903 blocked for more than 144 seconds. [ 381.011264][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 381.019088][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.027803][ T31] task:kworker/0:6 state:D stack:21928 pid:5903 tgid:5903 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 381.039903][ T31] Workqueue: md_misc mddev_delayed_delete [ 381.045704][ T31] Call Trace: [ 381.048981][ T31] [ 381.051901][ T31] __schedule+0x116f/0x5de0 [ 381.056464][ T31] ? __pfx___schedule+0x10/0x10 [ 381.061313][ T31] ? __pfx___schedule+0x10/0x10 [ 381.066204][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 381.071570][ T31] ? find_held_lock+0x2b/0x80 [ 381.076311][ T31] ? schedule+0x2d7/0x3a0 [ 381.080636][ T31] schedule+0xe7/0x3a0 [ 381.084780][ T31] schedule_timeout+0x257/0x290 [ 381.089634][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 381.095072][ T31] ? mark_held_locks+0x49/0x80 [ 381.099825][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.105063][ T31] __wait_for_common+0x2fc/0x4e0 [ 381.109995][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 381.115371][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 381.120827][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 381.126072][ T31] devtmpfs_submit_req+0xa8/0x100 [ 381.131095][ T31] devtmpfs_delete_node+0xf6/0x160 [ 381.136249][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 381.141973][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 381.148177][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.153388][ T31] ? kernfs_put+0x4e/0x60 [ 381.157729][ T31] ? sysfs_remove_group+0xc6/0x180 [ 381.162839][ T31] device_del+0x734/0x9f0 [ 381.167224][ T31] ? __pfx_device_del+0x10/0x10 [ 381.172138][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.177397][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 381.182590][ T31] del_gendisk+0x486/0xc40 [ 381.187199][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 381.192130][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 381.197291][ T31] md_kobj_release+0xb2/0x100 [ 381.201962][ T31] kobject_put+0x1e4/0x5a0 [ 381.206500][ T31] process_one_work+0x9cc/0x1b70 [ 381.211440][ T31] ? __pfx_process_one_work+0x10/0x10 [ 381.216882][ T31] ? assign_work+0x1a0/0x250 [ 381.221467][ T31] worker_thread+0x6c8/0xf10 [ 381.226074][ T31] ? __kthread_parkme+0x19e/0x250 [ 381.231097][ T31] ? __pfx_worker_thread+0x10/0x10 [ 381.236263][ T31] kthread+0x3c2/0x780 [ 381.240324][ T31] ? __pfx_kthread+0x10/0x10 [ 381.244949][ T31] ? __pfx_kthread+0x10/0x10 [ 381.249530][ T31] ? __pfx_kthread+0x10/0x10 [ 381.254092][ T31] ? __pfx_kthread+0x10/0x10 [ 381.260375][ T31] ? rcu_is_watching+0x12/0xc0 [ 381.265198][ T31] ? __pfx_kthread+0x10/0x10 [ 381.269779][ T31] ret_from_fork+0x45/0x80 [ 381.274191][ T31] ? __pfx_kthread+0x10/0x10 [ 381.278816][ T31] ret_from_fork_asm+0x1a/0x30 [ 381.283598][ T31] [ 381.286657][ T31] INFO: task kworker/u8:15:6670 blocked for more than 144 seconds. [ 381.294616][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 381.302232][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.310939][ T31] task:kworker/u8:15 state:D stack:25224 pid:6670 tgid:6670 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 381.322959][ T31] Workqueue: netns cleanup_net [ 381.327879][ T31] Call Trace: [ 381.331148][ T31] [ 381.334065][ T31] __schedule+0x116f/0x5de0 [ 381.338696][ T9059] Bluetooth: hci17: command tx timeout [ 381.344180][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 381.349137][ T31] ? __pfx___schedule+0x10/0x10 [ 381.353988][ T31] ? find_held_lock+0x2b/0x80 [ 381.358691][ T31] ? schedule+0x2d7/0x3a0 [ 381.363031][ T31] schedule+0xe7/0x3a0 [ 381.367294][ T31] schedule_timeout+0x257/0x290 [ 381.372137][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 381.377537][ T31] ? mark_held_locks+0x49/0x80 [ 381.382289][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.387523][ T31] __wait_for_common+0x2fc/0x4e0 [ 381.392454][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 381.397851][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 381.403299][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 381.408514][ T31] devtmpfs_submit_req+0xa8/0x100 [ 381.413535][ T31] devtmpfs_delete_node+0xf6/0x160 [ 381.418713][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 381.424483][ T31] ? kobject_put+0xab/0x5a0 [ 381.428998][ T31] ? __pfx_klist_children_put+0x10/0x10 [ 381.434742][ T31] ? klist_children_put+0x44/0x60 [ 381.439769][ T31] ? klist_put+0xf9/0x1b0 [ 381.444103][ T31] device_del+0x734/0x9f0 [ 381.448462][ T31] ? __pfx_device_del+0x10/0x10 [ 381.453309][ T31] ? find_held_lock+0x2b/0x80 [ 381.458018][ T31] device_unregister+0x1d/0xc0 [ 381.462777][ T31] device_destroy+0x99/0xe0 [ 381.467310][ T31] ? __pfx_device_destroy+0x10/0x10 [ 381.472508][ T31] ? kernfs_remove_by_name_ns+0x9f/0x110 [ 381.478172][ T31] macvtap_device_event+0x288/0x3e0 [ 381.483369][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 381.489117][ T31] ? bond_netdev_event+0xe7/0xd30 [ 381.494138][ T31] notifier_call_chain+0xb9/0x410 [ 381.499637][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 381.505391][ T31] call_netdevice_notifiers_info+0xbe/0x140 [ 381.511283][ T31] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 381.517642][ T31] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 381.524435][ T31] ? unregister_netdevice_queue+0x22e/0x3f0 [ 381.530325][ T31] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 381.536594][ T31] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 381.542399][ T31] default_device_exit_batch+0x853/0xaf0 [ 381.548194][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 381.554339][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 381.559846][ T31] ? __pfx___might_resched+0x10/0x10 [ 381.565162][ T31] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 381.570972][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 381.577190][ T31] ops_exit_list+0x128/0x180 [ 381.581775][ T31] cleanup_net+0x5c1/0xb30 [ 381.586218][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 381.591152][ T31] ? rcu_is_watching+0x12/0xc0 [ 381.595938][ T31] process_one_work+0x9cc/0x1b70 [ 381.600870][ T31] ? __pfx_batadv_nc_worker+0x10/0x10 [ 381.606253][ T31] ? __pfx_process_one_work+0x10/0x10 [ 381.611626][ T31] ? assign_work+0x1a0/0x250 [ 381.616248][ T31] worker_thread+0x6c8/0xf10 [ 381.620847][ T31] ? __pfx_worker_thread+0x10/0x10 [ 381.625989][ T31] kthread+0x3c2/0x780 [ 381.630070][ T31] ? __pfx_kthread+0x10/0x10 [ 381.634713][ T31] ? __pfx_kthread+0x10/0x10 [ 381.639300][ T31] ? __pfx_kthread+0x10/0x10 [ 381.643866][ T31] ? __pfx_kthread+0x10/0x10 [ 381.648464][ T31] ? rcu_is_watching+0x12/0xc0 [ 381.653226][ T31] ? __pfx_kthread+0x10/0x10 [ 381.657989][ T31] ret_from_fork+0x45/0x80 [ 381.662404][ T31] ? __pfx_kthread+0x10/0x10 [ 381.667004][ T31] ret_from_fork_asm+0x1a/0x30 [ 381.671772][ T31] [ 381.674816][ T31] INFO: task kworker/u8:16:6671 blocked for more than 144 seconds. [ 381.682692][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 381.690324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.699034][ T31] task:kworker/u8:16 state:D stack:23736 pid:6671 tgid:6671 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 381.711089][ T31] Workqueue: events_unbound linkwatch_event [ 381.717038][ T31] Call Trace: [ 381.720305][ T31] [ 381.723213][ T31] __schedule+0x116f/0x5de0 [ 381.727764][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 381.732716][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 381.737850][ T31] ? __pfx___schedule+0x10/0x10 [ 381.742708][ T31] ? find_held_lock+0x2b/0x80 [ 381.747695][ T31] ? schedule+0x2d7/0x3a0 [ 381.752027][ T31] schedule+0xe7/0x3a0 [ 381.756136][ T31] schedule_preempt_disabled+0x13/0x30 [ 381.761588][ T31] __mutex_lock+0x6c7/0xb90 [ 381.766215][ T31] ? linkwatch_event+0x51/0xc0 [ 381.770977][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 381.776080][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 381.781026][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 381.786694][ T31] ? linkwatch_event+0x51/0xc0 [ 381.791455][ T31] ? rtnl_lock+0x9/0x20 [ 381.795633][ T31] linkwatch_event+0x51/0xc0 [ 381.800238][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 381.805533][ T31] ? rcu_is_watching+0x12/0xc0 [ 381.810291][ T31] process_one_work+0x9cc/0x1b70 [ 381.815427][ T31] ? __pfx_process_one_work+0x10/0x10 [ 381.820796][ T31] ? assign_work+0x1a0/0x250 [ 381.825403][ T31] worker_thread+0x6c8/0xf10 [ 381.830005][ T31] ? __pfx_worker_thread+0x10/0x10 [ 381.835169][ T31] kthread+0x3c2/0x780 [ 381.839241][ T31] ? __pfx_kthread+0x10/0x10 [ 381.843823][ T31] ? __pfx_kthread+0x10/0x10 [ 381.848431][ T31] ? __pfx_kthread+0x10/0x10 [ 381.853010][ T31] ? __pfx_kthread+0x10/0x10 [ 381.857626][ T31] ? rcu_is_watching+0x12/0xc0 [ 381.862394][ T31] ? __pfx_kthread+0x10/0x10 [ 381.867003][ T31] ret_from_fork+0x45/0x80 [ 381.871412][ T31] ? __pfx_kthread+0x10/0x10 [ 381.876030][ T31] ret_from_fork_asm+0x1a/0x30 [ 381.880800][ T31] [ 381.883816][ T31] INFO: task syz-executor:8889 blocked for more than 145 seconds. [ 381.891836][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 381.899511][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.908190][ T31] task:syz-executor state:D stack:26824 pid:8889 tgid:8889 ppid:1 task_flags:0x400140 flags:0x00004004 [ 381.920157][ T31] Call Trace: [ 381.923413][ T31] [ 381.926366][ T31] __schedule+0x116f/0x5de0 [ 381.930879][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.937061][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 381.942255][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 381.947202][ T31] ? __pfx___schedule+0x10/0x10 [ 381.952054][ T31] ? find_held_lock+0x2b/0x80 [ 381.956773][ T31] ? schedule+0x2d7/0x3a0 [ 381.961111][ T31] schedule+0xe7/0x3a0 [ 381.965213][ T31] schedule_preempt_disabled+0x13/0x30 [ 381.970678][ T31] __mutex_lock+0x6c7/0xb90 [ 381.975456][ T31] ? inet6_rtm_newaddr+0x4e4/0x1c70 [ 381.980651][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 381.985694][ T31] ? find_held_lock+0x2b/0x80 [ 381.990373][ T31] ? inet6_rtm_newaddr+0x4e4/0x1c70 [ 381.995744][ T31] inet6_rtm_newaddr+0x4e4/0x1c70 [ 382.000768][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 382.006251][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 382.011185][ T31] ? find_held_lock+0x2b/0x80 [ 382.015902][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 382.021354][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 382.026819][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 382.031927][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 382.037430][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 382.042378][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.047843][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 382.052864][ T31] netlink_rcv_skb+0x16a/0x440 [ 382.057662][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.063117][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.068433][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 382.073714][ T31] netlink_unicast+0x53a/0x7f0 [ 382.078523][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 382.083808][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 382.088600][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.093895][ T31] __sys_sendto+0x495/0x510 [ 382.098436][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 382.103482][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 382.108870][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 382.113609][ T31] ? do_syscall_64+0x91/0x260 [ 382.118301][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.123491][ T31] do_syscall_64+0xcd/0x260 [ 382.128007][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.133890][ T31] RIP: 0033:0x7f106058fffc [ 382.138578][ T31] RSP: 002b:00007ffd9f7c9920 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 382.144578][ T9059] Bluetooth: hci18: command tx timeout [ 382.147007][ T31] RAX: ffffffffffffffda RBX: 00007f10612e4620 RCX: 00007f106058fffc [ 382.160375][ T31] RDX: 0000000000000040 RSI: 00007f10612e4670 RDI: 0000000000000003 [ 382.168352][ T31] RBP: 0000000000000000 R08: 00007ffd9f7c9974 R09: 000000000000000c [ 382.176352][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 382.184317][ T31] R13: 0000000000000000 R14: 00007f10612e4670 R15: 0000000000000000 [ 382.192318][ T31] [ 382.195380][ T31] INFO: task syz.5.684:8932 blocked for more than 145 seconds. [ 382.202907][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 382.210552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.219422][ T31] task:syz.5.684 state:D stack:26168 pid:8932 tgid:8931 ppid:7472 task_flags:0x400140 flags:0x00020004 [ 382.231389][ T31] Call Trace: [ 382.234687][ T31] [ 382.237616][ T31] __schedule+0x116f/0x5de0 [ 382.242115][ T31] ? avc_has_perm_noaudit+0x117/0x3b0 [ 382.247518][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 382.252446][ T31] ? __pfx___schedule+0x10/0x10 [ 382.257328][ T31] ? find_held_lock+0x2b/0x80 [ 382.262000][ T31] ? schedule+0x2d7/0x3a0 [ 382.266362][ T31] schedule+0xe7/0x3a0 [ 382.270424][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.275898][ T31] __mutex_lock+0x6c7/0xb90 [ 382.280401][ T31] ? xsk_bind+0x1dc/0x15d0 [ 382.284832][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 382.289856][ T31] ? __pfx_selinux_socket_bind+0x10/0x10 [ 382.296853][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 382.302725][ T31] ? xsk_bind+0x1dc/0x15d0 [ 382.307164][ T31] ? rtnl_lock+0x9/0x20 [ 382.311320][ T31] xsk_bind+0x1dc/0x15d0 [ 382.315601][ T31] ? __might_fault+0xe3/0x190 [ 382.320272][ T31] ? __pfx_xsk_bind+0x10/0x10 [ 382.325123][ T31] __sys_bind+0x211/0x260 [ 382.329446][ T31] ? __pfx___sys_bind+0x10/0x10 [ 382.334275][ T31] ? rcu_is_watching+0x12/0xc0 [ 382.339083][ T31] __x64_sys_bind+0x72/0xb0 [ 382.343577][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.348793][ T31] do_syscall_64+0xcd/0x260 [ 382.353293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.359256][ T31] RIP: 0033:0x7f8955b8e169 [ 382.363664][ T31] RSP: 002b:00007f89569d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 382.372112][ T31] RAX: ffffffffffffffda RBX: 00007f8955db5fa0 RCX: 00007f8955b8e169 [ 382.380196][ T31] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000007 [ 382.388202][ T31] RBP: 00007f8955c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 382.396195][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.404139][ T31] R13: 0000000000000000 R14: 00007f8955db5fa0 R15: 00007fffc9748898 [ 382.412126][ T31] [ 382.415189][ T31] INFO: task syz.4.686:8943 blocked for more than 145 seconds. [ 382.422713][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 382.430393][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.439152][ T31] task:syz.4.686 state:D stack:29048 pid:8943 tgid:8938 ppid:5818 task_flags:0x400040 flags:0x00004004 [ 382.451064][ T31] Call Trace: [ 382.454332][ T31] [ 382.457292][ T31] __schedule+0x116f/0x5de0 [ 382.461801][ T31] ? __pfx___schedule+0x10/0x10 [ 382.466676][ T31] ? find_held_lock+0x2b/0x80 [ 382.471349][ T31] ? schedule+0x2d7/0x3a0 [ 382.475709][ T31] schedule+0xe7/0x3a0 [ 382.479771][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.485264][ T31] __mutex_lock+0x6c7/0xb90 [ 382.489764][ T31] ? do_ipv6_setsockopt+0x2042/0x4420 [ 382.495168][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 382.500201][ T31] ? _copy_from_user+0x59/0xd0 [ 382.504990][ T31] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 382.512102][ T31] ? find_held_lock+0x2b/0x80 [ 382.516833][ T31] ? do_ipv6_setsockopt+0x2042/0x4420 [ 382.522200][ T31] ? rtnl_lock+0x9/0x20 [ 382.526358][ T31] do_ipv6_setsockopt+0x2042/0x4420 [ 382.531552][ T31] ? rcu_watching_snap_stopped_since+0xc0/0x110 [ 382.537859][ T31] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 382.543401][ T31] ? avc_has_perm_noaudit+0xc1/0x3b0 [ 382.548858][ T31] ? __pfx___schedule+0x10/0x10 [ 382.553689][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 382.559005][ T31] ? sock_has_perm+0x259/0x2f0 [ 382.563761][ T31] ? rcu_is_watching+0x12/0xc0 [ 382.568540][ T31] ? irqentry_exit+0x3b/0x90 [ 382.573123][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.578347][ T31] ? ipv6_setsockopt+0xcb/0x170 [ 382.583204][ T31] ipv6_setsockopt+0xcb/0x170 [ 382.587891][ T31] udpv6_setsockopt+0x7d/0xd0 [ 382.592557][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 382.598486][ T31] do_sock_setsockopt+0x221/0x470 [ 382.603506][ T31] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 382.609094][ T31] __sys_setsockopt+0x1a0/0x230 [ 382.613940][ T31] __x64_sys_setsockopt+0xbd/0x160 [ 382.619121][ T31] ? do_syscall_64+0x91/0x260 [ 382.623796][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.629008][ T31] do_syscall_64+0xcd/0x260 [ 382.633520][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.639451][ T31] RIP: 0033:0x7f3a2a58e169 [ 382.643874][ T31] RSP: 002b:00007f3a2b354038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 382.652363][ T31] RAX: ffffffffffffffda RBX: 00007f3a2a7b6160 RCX: 00007f3a2a58e169 [ 382.660537][ T31] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000005 [ 382.668547][ T31] RBP: 00007f3a2a610a68 R08: 0000000000000108 R09: 0000000000000000 [ 382.676538][ T31] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 382.684519][ T31] R13: 0000000000000000 R14: 00007f3a2a7b6160 R15: 00007ffeae5bf458 [ 382.692486][ T31] [ 382.695543][ T31] INFO: task syz.4.686:8945 blocked for more than 145 seconds. [ 382.703071][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 382.710701][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.719380][ T31] task:syz.4.686 state:D stack:29048 pid:8945 tgid:8938 ppid:5818 task_flags:0x400140 flags:0x00000004 [ 382.731319][ T31] Call Trace: [ 382.734636][ T31] [ 382.737559][ T31] __schedule+0x116f/0x5de0 [ 382.742049][ T31] ? __pfx___schedule+0x10/0x10 [ 382.746937][ T31] ? find_held_lock+0x2b/0x80 [ 382.751605][ T31] ? schedule+0x2d7/0x3a0 [ 382.755955][ T31] schedule+0xe7/0x3a0 [ 382.760018][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.765666][ T31] __mutex_lock+0x6c7/0xb90 [ 382.770169][ T31] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 382.776534][ T31] ? dev_ioctl+0x212/0x10e0 [ 382.781191][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 382.786689][ T31] ? dev_load+0x8e/0x240 [ 382.790936][ T31] ? dev_ioctl+0x212/0x10e0 [ 382.795500][ T31] ? rtnl_lock+0x9/0x20 [ 382.799644][ T31] dev_ioctl+0x212/0x10e0 [ 382.803959][ T31] sock_do_ioctl+0x19d/0x280 [ 382.808569][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 382.813678][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 382.820309][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 382.826943][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 382.833799][ T31] sock_ioctl+0x227/0x6b0 [ 382.838186][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 382.843037][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 382.848611][ T31] ? selinux_file_ioctl+0x180/0x270 [ 382.853810][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 382.859116][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 382.863996][ T31] __x64_sys_ioctl+0x190/0x200 [ 382.869041][ T31] do_syscall_64+0xcd/0x260 [ 382.873548][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.879601][ T31] RIP: 0033:0x7f3a2a58e169 [ 382.883998][ T31] RSP: 002b:00007f3a2b333038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.892435][ T31] RAX: ffffffffffffffda RBX: 00007f3a2a7b6240 RCX: 00007f3a2a58e169 [ 382.900448][ T31] RDX: 0000200000000440 RSI: 0000000000008922 RDI: 0000000000000006 [ 382.908617][ T31] RBP: 00007f3a2a610a68 R08: 0000000000000000 R09: 0000000000000000 [ 382.916648][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.924736][ T31] R13: 0000000000000000 R14: 00007f3a2a7b6240 R15: 00007ffeae5bf458 [ 382.932714][ T31] [ 382.935803][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 382.944833][ T31] INFO: task syz.4.686:8947 blocked for more than 146 seconds. [ 382.952359][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 382.960009][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.968719][ T31] task:syz.4.686 state:D stack:28792 pid:8947 tgid:8938 ppid:5818 task_flags:0x400040 flags:0x00004004 [ 382.980755][ T31] Call Trace: [ 382.984026][ T31] [ 382.987025][ T31] __schedule+0x116f/0x5de0 [ 382.991536][ T31] ? __pfx___schedule+0x10/0x10 [ 382.996436][ T31] ? find_held_lock+0x2b/0x80 [ 383.001112][ T31] ? schedule+0x2d7/0x3a0 [ 383.005452][ T31] schedule+0xe7/0x3a0 [ 383.009527][ T31] schedule_preempt_disabled+0x13/0x30 [ 383.015072][ T31] __mutex_lock+0x6c7/0xb90 [ 383.019590][ T31] ? do_ipv6_setsockopt+0x2042/0x4420 [ 383.025000][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 383.030030][ T31] ? _copy_from_user+0x59/0xd0 [ 383.034840][ T31] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 383.041950][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 383.046950][ T31] ? do_ipv6_setsockopt+0x2042/0x4420 [ 383.052329][ T31] ? rtnl_lock+0x9/0x20 [ 383.056531][ T31] do_ipv6_setsockopt+0x2042/0x4420 [ 383.061729][ T31] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 383.067300][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 383.072676][ T31] ? avc_has_perm+0x11a/0x1c0 [ 383.077381][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 383.082396][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 383.087690][ T31] ? sock_has_perm+0x259/0x2f0 [ 383.092446][ T31] ? __pfx_sock_has_perm+0x10/0x10 [ 383.097603][ T31] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 383.104028][ T31] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 383.110813][ T31] ? futex_wait+0x120/0x380 [ 383.115341][ T31] ? ipv6_setsockopt+0xcb/0x170 [ 383.120185][ T31] ipv6_setsockopt+0xcb/0x170 [ 383.124880][ T31] udpv6_setsockopt+0x7d/0xd0 [ 383.129544][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 383.135485][ T31] do_sock_setsockopt+0x221/0x470 [ 383.140507][ T31] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 383.146097][ T31] __sys_setsockopt+0x1a0/0x230 [ 383.150941][ T31] __x64_sys_setsockopt+0xbd/0x160 [ 383.156057][ T31] ? do_syscall_64+0x91/0x260 [ 383.160742][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.165982][ T31] do_syscall_64+0xcd/0x260 [ 383.170488][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.176449][ T31] RIP: 0033:0x7f3a2a58e169 [ 383.180860][ T31] RSP: 002b:00007f3a2b312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.189289][ T31] RAX: ffffffffffffffda RBX: 00007f3a2a7b6320 RCX: 00007f3a2a58e169 [ 383.197269][ T31] RDX: 000000000000002d RSI: 0000000000000029 RDI: 0000000000000005 [ 383.205259][ T31] RBP: 00007f3a2a610a68 R08: 0000000000000108 R09: 0000000000000000 [ 383.213217][ T31] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 383.221281][ T31] R13: 0000000000000000 R14: 00007f3a2a7b6320 R15: 00007ffeae5bf458 [ 383.229303][ T31] [ 383.232302][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 383.241352][ T31] [ 383.241352][ T31] Showing all locks held in the system: [ 383.249073][ T31] 3 locks held by kworker/0:0/9: [ 383.253981][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 383.264716][ T31] #1: ffffc900000e7d18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 383.275139][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 383.285555][ T31] 2 locks held by kworker/1:0/24: [ 383.290568][ T31] 2 locks held by kdevtmpfs/26: [ 383.295512][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 383.306464][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 383.316190][ T31] 1 lock held by khungtaskd/31: [ 383.321028][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 383.331170][ T31] 1 lock held by klogd/5185: [ 383.336093][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 383.346249][ T31] 1 lock held by dhcpcd/5490: [ 383.350914][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26d/0x1f50 [ 383.360397][ T31] 2 locks held by getty/5574: [ 383.365265][ T31] #0: ffff88814da030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 383.375258][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 383.385539][ T31] 3 locks held by kworker/0:3/5871: [ 383.390733][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 383.402919][ T31] #1: ffffc9000457fd18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 383.417390][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 383.427545][ T31] 3 locks held by kworker/1:5/5875: [ 383.432732][ T31] #0: ffff888021ee5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 383.454474][ T31] #1: ffffc90003097d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 383.471599][ T31] #2: ffff888144fb8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 383.480770][ T31] 2 locks held by kworker/0:6/5903: [ 383.486149][ T31] #0: ffff888021ee5d48 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 383.496925][ T31] #1: ffffc90003057d18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 383.508684][ T31] 3 locks held by kworker/u8:11/6666: [ 383.514039][ T31] #0: ffff88814d75c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 383.525927][ T31] #1: ffffc90003207d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 383.539028][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 383.548577][ T31] 4 locks held by kworker/u8:15/6670: [ 383.553929][ T31] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 383.564301][ T31] #1: ffffc90003557d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 383.574262][ T31] #2: ffffffff90114fd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 383.583700][ T31] #3: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 383.593729][ T31] 3 locks held by kworker/u8:16/6671: [ 383.599117][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 383.610285][ T31] #1: ffffc90003547d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 383.620742][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 383.629827][ T31] 5 locks held by kworker/u8:17/6672: [ 383.635251][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 383.645982][ T31] #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 383.657437][ T31] #2: ffff8880b85256d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 383.666776][ T31] #3: ffffffff9ad2fa38 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 383.677145][ T31] #4: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 383.686840][ T31] 1 lock held by syz-executor/8889: [ 383.692004][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x4e4/0x1c70 [ 383.701499][ T31] 1 lock held by syz.5.684/8932: [ 383.706443][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x1dc/0x15d0 [ 383.715150][ T31] 1 lock held by syz.4.686/8943: [ 383.720067][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x2042/0x4420 [ 383.729775][ T31] 1 lock held by syz.4.686/8945: [ 383.734732][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0 [ 383.743520][ T31] 1 lock held by syz.4.686/8947: [ 383.748484][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x2042/0x4420 [ 383.758217][ T31] 1 lock held by syz.2.690/8965: [ 383.763144][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x2042/0x4420 [ 383.772852][ T31] 1 lock held by syz.2.690/8966: [ 383.777789][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0 [ 383.786576][ T31] 2 locks held by syz.3.700/8997: [ 383.791580][ T31] #0: ffffffff900ff588 (br_ioctl_mutex){+.+.}-{4:4}, at: br_ioctl_call+0x34/0xa0 [ 383.800847][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0xf4/0x4c0 [ 383.809826][ T31] 1 lock held by syz.3.700/8998: [ 383.814759][ T31] #0: ffffffff900ff588 (br_ioctl_mutex){+.+.}-{4:4}, at: br_ioctl_call+0x34/0xa0 [ 383.823987][ T31] 1 lock held by syz-executor/9003: [ 383.829246][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.838740][ T31] 1 lock held by syz-executor/9005: [ 383.843924][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.853601][ T31] 1 lock held by syz-executor/9010: [ 383.858845][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.868269][ T31] 1 lock held by syz-executor/9015: [ 383.873431][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.882836][ T31] 1 lock held by syz-executor/9019: [ 383.888051][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.898269][ T31] 1 lock held by syz-executor/9025: [ 383.903458][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.913240][ T31] 1 lock held by syz-executor/9028: [ 383.918468][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.927904][ T31] 1 lock held by syz-executor/9032: [ 383.933091][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.942528][ T31] 1 lock held by syz-executor/9037: [ 383.947723][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.957185][ T31] 1 lock held by syz-executor/9042: [ 383.962363][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.971764][ T31] 1 lock held by syz-executor/9047: [ 383.977054][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 383.986563][ T31] 1 lock held by syz-executor/9049: [ 383.991741][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 384.001327][ T31] 1 lock held by syz-executor/9055: [ 384.006553][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 384.015986][ T31] 1 lock held by syz-executor/9062: [ 384.021171][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 384.030605][ T31] [ 384.032919][ T31] ============================================= [ 384.032919][ T31] [ 384.041513][ T31] NMI backtrace for cpu 1 [ 384.041525][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 384.041545][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 384.041554][ T31] Call Trace: [ 384.041559][ T31] [ 384.041565][ T31] dump_stack_lvl+0x116/0x1f0 [ 384.041591][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 384.041609][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.041628][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 384.041647][ T31] watchdog+0xf70/0x12c0 [ 384.041669][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.041684][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.041706][ T31] ? __kthread_parkme+0x19e/0x250 [ 384.041732][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.041748][ T31] kthread+0x3c2/0x780 [ 384.041764][ T31] ? __pfx_kthread+0x10/0x10 [ 384.041779][ T31] ? __pfx_kthread+0x10/0x10 [ 384.041794][ T31] ? __pfx_kthread+0x10/0x10 [ 384.041809][ T31] ? __pfx_kthread+0x10/0x10 [ 384.041824][ T31] ? rcu_is_watching+0x12/0xc0 [ 384.041845][ T31] ? __pfx_kthread+0x10/0x10 [ 384.041862][ T31] ret_from_fork+0x45/0x80 [ 384.041879][ T31] ? __pfx_kthread+0x10/0x10 [ 384.041895][ T31] ret_from_fork_asm+0x1a/0x30 [ 384.041931][ T31] [ 384.041936][ T31] Sending NMI from CPU 1 to CPUs 0: [ 384.173792][ C0] NMI backtrace for cpu 0 [ 384.173805][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 384.173821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 384.173828][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 384.173849][ C0] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 384.173862][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 384.173873][ C0] RAX: 0000000000c94285 RBX: 0000000000000000 RCX: ffffffff8b72a419 [ 384.173881][ C0] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 384.173889][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 384.173897][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 384.173904][ C0] R13: ffffffff8e097740 R14: ffffffff90864910 R15: 0000000000000000 [ 384.173912][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 384.173925][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.173933][ C0] CR2: 00005599df2160b0 CR3: 000000000e180000 CR4: 00000000003526f0 [ 384.173941][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 384.173948][ C0] DR3: 00000000e08e000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 384.173956][ C0] Call Trace: [ 384.173960][ C0] [ 384.173965][ C0] default_idle+0x13/0x20 [ 384.173982][ C0] default_idle_call+0x6d/0xb0 [ 384.173999][ C0] do_idle+0x391/0x510 [ 384.174016][ C0] ? __pfx_do_idle+0x10/0x10 [ 384.174032][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 384.174052][ C0] cpu_startup_entry+0x4f/0x60 [ 384.174067][ C0] rest_init+0x16b/0x2b0 [ 384.174077][ C0] ? acpi_subsystem_init+0x133/0x180 [ 384.174093][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 384.174111][ C0] start_kernel+0x3e9/0x4d0 [ 384.174128][ C0] x86_64_start_reservations+0x18/0x30 [ 384.174145][ C0] x86_64_start_kernel+0xb0/0xc0 [ 384.174161][ C0] common_startup_64+0x13e/0x148 [ 384.174182][ C0] [ 384.174945][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 384.174957][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 384.174975][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 384.174983][ T31] Call Trace: [ 384.174988][ T31] [ 384.174994][ T31] dump_stack_lvl+0x3d/0x1f0 [ 384.175015][ T31] panic+0x71c/0x800 [ 384.175029][ T31] ? __pfx_panic+0x10/0x10 [ 384.175042][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 384.175062][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.175077][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 384.175094][ T31] ? watchdog+0xdda/0x12c0 [ 384.175109][ T31] ? watchdog+0xdcd/0x12c0 [ 384.175126][ T31] watchdog+0xdeb/0x12c0 [ 384.175145][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.175158][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.175178][ T31] ? __kthread_parkme+0x19e/0x250 [ 384.175200][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.175214][ T31] kthread+0x3c2/0x780 [ 384.175230][ T31] ? __pfx_kthread+0x10/0x10 [ 384.175243][ T31] ? __pfx_kthread+0x10/0x10 [ 384.175257][ T31] ? __pfx_kthread+0x10/0x10 [ 384.175271][ T31] ? __pfx_kthread+0x10/0x10 [ 384.175284][ T31] ? rcu_is_watching+0x12/0xc0 [ 384.175303][ T31] ? __pfx_kthread+0x10/0x10 [ 384.175318][ T31] ret_from_fork+0x45/0x80 [ 384.175333][ T31] ? __pfx_kthread+0x10/0x10 [ 384.175348][ T31] ret_from_fork_asm+0x1a/0x30 [ 384.175378][ T31] [ 384.526565][ T31] Kernel Offset: disabled [ 384.530872][ T31] Rebooting in 86400 seconds..