last executing test programs: 59.941177153s ago: executing program 0 (id=98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000140)={0xdb, 0x0, 0x8d}) 55.832729121s ago: executing program 1 (id=135): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) 55.589423024s ago: executing program 1 (id=136): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006500)=[{{&(0x7f0000000180)=@phonet={0x23, 0x5, 0x9, 0x9}, 0x80, 0x0}}], 0x1, 0x20020004) 55.425663735s ago: executing program 4 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005f000300000d000000009fea5732"], 0x1c}}, 0x0) 55.250555486s ago: executing program 4 (id=138): r0 = gettid() clock_nanosleep(0x2, 0x3b9ac9ff, &(0x7f0000000100)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 54.890066445s ago: executing program 0 (id=139): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82900, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 54.832852144s ago: executing program 1 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180)) 54.819672586s ago: executing program 4 (id=141): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0xc) 54.655758298s ago: executing program 0 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) 54.47455054s ago: executing program 4 (id=143): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) 53.999388701s ago: executing program 4 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x4000084) 53.639988161s ago: executing program 4 (id=147): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x250, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 53.033579938s ago: executing program 0 (id=152): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x5309, 0x0) 52.733238713s ago: executing program 0 (id=154): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) 52.466205118s ago: executing program 0 (id=155): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083863090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b6d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa3647f17b28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833fea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 52.241353181s ago: executing program 1 (id=158): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') exit(0xfffffffffffffff7) fstat(r0, &(0x7f00000001c0)) 51.856352882s ago: executing program 2 (id=162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4044004) 51.566666679s ago: executing program 2 (id=164): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) 51.387681573s ago: executing program 3 (id=165): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 51.270090693s ago: executing program 2 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 51.192642775s ago: executing program 1 (id=167): r0 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], &(0x7f0000002480)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}], 0x0, 0x1}, 0x20) 50.872680637s ago: executing program 3 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) set_robust_list(&(0x7f0000000640)={0x0, 0xe}, 0x18) 50.806743199s ago: executing program 1 (id=169): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 50.676819333s ago: executing program 3 (id=170): r0 = epoll_create1(0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1000201c}) 50.504341876s ago: executing program 3 (id=171): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 50.452575198s ago: executing program 2 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}, 0x24}}, 0x0) 50.280179475s ago: executing program 3 (id=173): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x178) 50.154541515s ago: executing program 2 (id=174): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) truncate(&(0x7f0000000180)='./file1\x00', 0x8000) 50.020942303s ago: executing program 3 (id=175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x102, 0x0) 49.988316288s ago: executing program 2 (id=176): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a2701020301090223000100000000090401"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 0s ago: executing program 32 (id=147): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x250, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. [ 57.538491][ T30] audit: type=1400 audit(1746187825.632:88): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.542126][ T5800] cgroup: Unknown subsys name 'net' [ 57.561293][ T30] audit: type=1400 audit(1746187825.632:89): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.588984][ T30] audit: type=1400 audit(1746187825.662:90): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.769500][ T5800] cgroup: Unknown subsys name 'cpuset' [ 57.777541][ T5800] cgroup: Unknown subsys name 'rlimit' [ 57.921551][ T30] audit: type=1400 audit(1746187826.012:91): avc: denied { setattr } for pid=5800 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.954055][ T30] audit: type=1400 audit(1746187826.012:92): avc: denied { create } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.985043][ T30] audit: type=1400 audit(1746187826.012:93): avc: denied { write } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.996789][ T5802] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.005802][ T30] audit: type=1400 audit(1746187826.012:94): avc: denied { read } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.034352][ T30] audit: type=1400 audit(1746187826.022:95): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.059193][ T30] audit: type=1400 audit(1746187826.022:96): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.082698][ T30] audit: type=1400 audit(1746187826.062:97): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.912686][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.855875][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.865376][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.875830][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.883965][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.891927][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.899560][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.911527][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.923398][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.932462][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.939956][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.940620][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.947524][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.954980][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.970932][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.981167][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.992207][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.000178][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.007339][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.015514][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.025644][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.035359][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.047878][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.055476][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.065915][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.073491][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.329342][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 61.390711][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 61.483500][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 61.509550][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.517291][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.524487][ T5810] bridge_slave_0: entered allmulticast mode [ 61.531722][ T5810] bridge_slave_0: entered promiscuous mode [ 61.572666][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.579903][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.587208][ T5810] bridge_slave_1: entered allmulticast mode [ 61.593808][ T5810] bridge_slave_1: entered promiscuous mode [ 61.705313][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.723411][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.730595][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.738755][ T5818] bridge_slave_0: entered allmulticast mode [ 61.745406][ T5818] bridge_slave_0: entered promiscuous mode [ 61.755535][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.762691][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.769843][ T5818] bridge_slave_1: entered allmulticast mode [ 61.776981][ T5818] bridge_slave_1: entered promiscuous mode [ 61.788735][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.817033][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 61.862595][ T5810] team0: Port device team_slave_0 added [ 61.873569][ T5810] team0: Port device team_slave_1 added [ 61.890776][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.899196][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.906283][ T5813] bridge_slave_0: entered allmulticast mode [ 61.913411][ T5813] bridge_slave_0: entered promiscuous mode [ 61.929072][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 61.949744][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.959228][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.966295][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.973983][ T5813] bridge_slave_1: entered allmulticast mode [ 61.980933][ T5813] bridge_slave_1: entered promiscuous mode [ 62.037819][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.064168][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.071214][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.097398][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.114917][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.122007][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.148079][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.172411][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.183804][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.214566][ T5818] team0: Port device team_slave_0 added [ 62.253878][ T5818] team0: Port device team_slave_1 added [ 62.262293][ T5813] team0: Port device team_slave_0 added [ 62.282301][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.290017][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.297823][ T5819] bridge_slave_0: entered allmulticast mode [ 62.304784][ T5819] bridge_slave_0: entered promiscuous mode [ 62.328068][ T5813] team0: Port device team_slave_1 added [ 62.333981][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.341798][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.349100][ T5821] bridge_slave_0: entered allmulticast mode [ 62.355901][ T5821] bridge_slave_0: entered promiscuous mode [ 62.370840][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.378220][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.385337][ T5819] bridge_slave_1: entered allmulticast mode [ 62.392972][ T5819] bridge_slave_1: entered promiscuous mode [ 62.430416][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.437882][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.444969][ T5821] bridge_slave_1: entered allmulticast mode [ 62.453019][ T5821] bridge_slave_1: entered promiscuous mode [ 62.483409][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.490575][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.516707][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.532064][ T5810] hsr_slave_0: entered promiscuous mode [ 62.538529][ T5810] hsr_slave_1: entered promiscuous mode [ 62.545846][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.552969][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.579135][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.591153][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.598142][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.624071][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.644711][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.655747][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.666168][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.673259][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.699505][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.720875][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.740545][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.771743][ T5819] team0: Port device team_slave_0 added [ 62.801424][ T5819] team0: Port device team_slave_1 added [ 62.819106][ T5821] team0: Port device team_slave_0 added [ 62.853928][ T5821] team0: Port device team_slave_1 added [ 62.870867][ T5818] hsr_slave_0: entered promiscuous mode [ 62.877822][ T5818] hsr_slave_1: entered promiscuous mode [ 62.883657][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.891388][ T5818] Cannot create hsr debugfs directory [ 62.897666][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.904609][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.930647][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.942890][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.950012][ T5812] Bluetooth: hci0: command tx timeout [ 62.950316][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.981509][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.016957][ T5812] Bluetooth: hci1: command tx timeout [ 63.034661][ T5813] hsr_slave_0: entered promiscuous mode [ 63.041999][ T5813] hsr_slave_1: entered promiscuous mode [ 63.048019][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.055557][ T5813] Cannot create hsr debugfs directory [ 63.061883][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.069050][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.095702][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.106590][ T5129] Bluetooth: hci3: command tx timeout [ 63.107052][ T5129] Bluetooth: hci4: command tx timeout [ 63.113556][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.120249][ T5812] Bluetooth: hci2: command tx timeout [ 63.124506][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.155869][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.260569][ T5819] hsr_slave_0: entered promiscuous mode [ 63.266599][ T5819] hsr_slave_1: entered promiscuous mode [ 63.272802][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.280392][ T5819] Cannot create hsr debugfs directory [ 63.323090][ T5821] hsr_slave_0: entered promiscuous mode [ 63.330117][ T5821] hsr_slave_1: entered promiscuous mode [ 63.335956][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.343882][ T5821] Cannot create hsr debugfs directory [ 63.582819][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.606525][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.625719][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.639025][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.674298][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.691421][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.706613][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.717947][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.781179][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.794149][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.804352][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.818593][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.917857][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.941681][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.951845][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.963718][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.015055][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.040800][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.051864][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.068302][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.079650][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.089741][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.110250][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.122217][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.141222][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.148439][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.162675][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.180357][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.187476][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.198636][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.205711][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.222122][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.229258][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.319412][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.360399][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.367550][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.384895][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 64.384909][ T30] audit: type=1400 audit(1746187832.472:111): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.425054][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.438116][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.445244][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.563219][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.584571][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.598114][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.605374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.634469][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.641628][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.670924][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.699229][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.751677][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.758834][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.790671][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.814782][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.821949][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.860521][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.971063][ T5818] veth0_vlan: entered promiscuous mode [ 65.017737][ T5812] Bluetooth: hci0: command tx timeout [ 65.034048][ T5818] veth1_vlan: entered promiscuous mode [ 65.081064][ T5813] veth0_vlan: entered promiscuous mode [ 65.097196][ T5812] Bluetooth: hci1: command tx timeout [ 65.121197][ T5813] veth1_vlan: entered promiscuous mode [ 65.141078][ T5810] veth0_vlan: entered promiscuous mode [ 65.165754][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.178553][ T5812] Bluetooth: hci2: command tx timeout [ 65.183985][ T5812] Bluetooth: hci4: command tx timeout [ 65.189444][ T5818] veth0_macvtap: entered promiscuous mode [ 65.192540][ T5810] veth1_vlan: entered promiscuous mode [ 65.197015][ T5129] Bluetooth: hci3: command tx timeout [ 65.213562][ T5818] veth1_macvtap: entered promiscuous mode [ 65.243611][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.263543][ T5813] veth0_macvtap: entered promiscuous mode [ 65.272811][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.287968][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.305102][ T5819] veth0_vlan: entered promiscuous mode [ 65.311494][ T5813] veth1_macvtap: entered promiscuous mode [ 65.328904][ T5810] veth0_macvtap: entered promiscuous mode [ 65.339441][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.348506][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.357549][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.366493][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.393571][ T5810] veth1_macvtap: entered promiscuous mode [ 65.407459][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.418920][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.430325][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.444807][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.455467][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.466093][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.473905][ T5819] veth1_vlan: entered promiscuous mode [ 65.503878][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.514177][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.523252][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.532096][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.560791][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.571992][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.583435][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.594457][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.605846][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.636408][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.647019][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.659405][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.669895][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.680976][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.735103][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.750548][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.759424][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.768364][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.782241][ T5819] veth0_macvtap: entered promiscuous mode [ 65.802565][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.810992][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.829102][ T5821] veth0_vlan: entered promiscuous mode [ 65.842161][ T5819] veth1_macvtap: entered promiscuous mode [ 65.869939][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.873155][ T5821] veth1_vlan: entered promiscuous mode [ 65.879758][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.895786][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.904242][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.936676][ T30] audit: type=1400 audit(1746187834.022:112): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.o06cTs/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.974373][ T30] audit: type=1400 audit(1746187834.022:113): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.003888][ T30] audit: type=1400 audit(1746187834.022:114): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.o06cTs/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.030495][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.031831][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.043078][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.059178][ T30] audit: type=1400 audit(1746187834.022:115): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.067440][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.091661][ T30] audit: type=1400 audit(1746187834.022:116): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.o06cTs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.102050][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.129348][ T30] audit: type=1400 audit(1746187834.022:117): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.o06cTs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.134854][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.173901][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.184331][ T30] audit: type=1400 audit(1746187834.022:118): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.185025][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.208945][ T30] audit: type=1400 audit(1746187834.062:119): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.218498][ T5821] veth0_macvtap: entered promiscuous mode [ 66.242209][ T30] audit: type=1400 audit(1746187834.062:120): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=7338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.250164][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.275484][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.280030][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.293360][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.293445][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.314852][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.324921][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.335654][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.349249][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.376342][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.385936][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.396463][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.424294][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.436767][ T5821] veth1_macvtap: entered promiscuous mode [ 66.473358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.484644][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.541856][ T5891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 66.591844][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.602874][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.635633][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.639465][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.667105][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.683726][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.698705][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.709468][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.719723][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.719735][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.720772][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.808139][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.828736][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.845660][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.860704][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.875037][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.898651][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.912306][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.929514][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.941779][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.966271][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.995532][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.053962][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.064044][ T5815] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.083414][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.098007][ T5812] Bluetooth: hci0: command tx timeout [ 67.113636][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.126169][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.148966][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.166112][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.177873][ T5812] Bluetooth: hci1: command tx timeout [ 67.250372][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.262156][ T5812] Bluetooth: hci4: command tx timeout [ 67.263850][ T5129] Bluetooth: hci3: command tx timeout [ 67.270026][ T5812] Bluetooth: hci2: command tx timeout [ 67.279652][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.291266][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.305224][ T5815] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.314805][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.355089][ T5815] usb 1-1: config 0 descriptor?? [ 67.456217][ T5921] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 67.471040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.489027][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.603728][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.630646][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.686612][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19'. [ 67.781746][ T5815] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 67.814013][ T5815] plantronics 0003:047F:FFFF.0001: parse failed [ 67.853160][ T5815] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 67.983916][ T5906] usb 1-1: USB disconnect, device number 2 [ 68.429210][ T5952] veth1_macvtap: left promiscuous mode [ 68.830696][ T951] IPVS: starting estimator thread 0... [ 68.926922][ T5968] IPVS: using max 47 ests per chain, 112800 per kthread [ 69.020301][ T5978] pimreg3: entered allmulticast mode [ 69.178145][ T5812] Bluetooth: hci0: command tx timeout [ 69.267267][ T5812] Bluetooth: hci1: command tx timeout [ 69.337211][ T5812] Bluetooth: hci3: command tx timeout [ 69.344427][ T5822] Bluetooth: hci2: command tx timeout [ 69.346699][ T5129] Bluetooth: hci4: command tx timeout [ 69.426686][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 69.426700][ T30] audit: type=1400 audit(1746187837.512:158): avc: denied { accept } for pid=5995 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.456825][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.547062][ T5906] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.551135][ T6001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.628787][ T5815] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.648114][ T5815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.677004][ T5815] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 69.699642][ T30] audit: type=1400 audit(1746187837.792:159): avc: denied { create } for pid=6003 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.702833][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.759935][ T30] audit: type=1400 audit(1746187837.822:160): avc: denied { bind } for pid=6003 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.760313][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 69.820938][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.833410][ T5815] usb 2-1: config 0 descriptor?? [ 69.869034][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.906508][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 69.939328][ T5906] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 69.950517][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.982288][ T5906] usb 5-1: config 0 descriptor?? [ 70.016856][ T30] audit: type=1400 audit(1746187838.092:161): avc: denied { create } for pid=6016 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.057212][ T1866] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 70.065795][ T30] audit: type=1400 audit(1746187838.132:162): avc: denied { setopt } for pid=6016 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.275697][ T5815] acrux 0003:1A34:0802.0002: item fetching failed at offset 3/7 [ 70.316134][ T5815] acrux 0003:1A34:0802.0002: parse failed [ 70.348832][ T5815] acrux 0003:1A34:0802.0002: probe with driver acrux failed with error -22 [ 70.668393][ T5906] chicony 0003:04F2:1123.0003: hidraw0: USB HID v0.00 Device [HID 04f2:1123] on usb-dummy_hcd.4-1/input0 [ 70.676462][ T1866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.830022][ T5906] usb 2-1: USB disconnect, device number 2 [ 70.944823][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.954116][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.116886][ T5815] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.173924][ T5858] usb 5-1: USB disconnect, device number 2 [ 71.307044][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 71.321069][ T5815] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 71.338921][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 71.359904][ T5815] usb 1-1: Product: syz [ 71.364094][ T5815] usb 1-1: Manufacturer: syz [ 71.396933][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.414743][ T5815] usb 1-1: SerialNumber: syz [ 71.446330][ T5815] usb 1-1: config 0 descriptor?? [ 71.593004][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 71.635752][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 71.718463][ T5887] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 71.813162][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.893581][ T30] audit: type=1400 audit(1746187839.982:163): avc: denied { create } for pid=6036 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.927588][ T5887] usb 4-1: config 0 descriptor?? [ 71.944369][ T5906] usb 1-1: USB disconnect, device number 3 [ 72.069766][ T30] audit: type=1400 audit(1746187840.052:164): avc: denied { connect } for pid=6036 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.215662][ T30] audit: type=1400 audit(1746187840.052:165): avc: denied { write } for pid=6036 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.282765][ T6041] Bluetooth: MGMT ver 1.23 [ 72.302817][ T30] audit: type=1400 audit(1746187840.372:166): avc: denied { bind } for pid=6040 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.360519][ T30] audit: type=1400 audit(1746187840.372:167): avc: denied { write } for pid=6040 comm="syz.4.67" path="socket:[7822]" dev="sockfs" ino=7822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.414801][ T5887] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.04 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 72.450506][ T5887] holtek 0003:1241:5015.0004: no inputs found [ 72.527655][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.638745][ T5906] usb 4-1: USB disconnect, device number 2 [ 72.691906][ T5815] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 72.710990][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.751553][ T5815] usb 2-1: config 0 descriptor?? [ 73.202052][ T5815] [drm:udl_init] *ERROR* Selecting channel failed [ 73.311394][ T5815] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 73.415508][ T5815] [drm] Initialized udl on minor 2 [ 73.495915][ T5815] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 73.565800][ T5815] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 73.629061][ T5887] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 73.657729][ T5815] usb 2-1: USB disconnect, device number 3 [ 73.734430][ T5887] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 74.226927][ T5858] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.418972][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.506028][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.573081][ T5858] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 74.628753][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.715242][ T5858] usb 5-1: config 0 descriptor?? [ 75.205305][ T5858] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 75.301024][ T5858] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 75.400693][ T5858] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 75.476863][ T5858] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 75.547890][ T5858] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -71 [ 75.661914][ T5858] usb 5-1: USB disconnect, device number 3 [ 75.858391][ T5887] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.934514][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 75.934528][ T30] audit: type=1400 audit(1746187844.022:177): avc: denied { read write } for pid=6104 comm="syz.2.97" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.077711][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 76.085826][ T24] cfg80211: failed to load regulatory.db [ 76.105376][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.146795][ T30] audit: type=1400 audit(1746187844.022:178): avc: denied { open } for pid=6104 comm="syz.2.97" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.190721][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.254682][ T5887] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 76.286801][ T30] audit: type=1400 audit(1746187844.062:179): avc: denied { ioctl } for pid=6104 comm="syz.2.97" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.322878][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.364062][ T5887] usb 4-1: config 0 descriptor?? [ 76.420108][ T30] audit: type=1400 audit(1746187844.112:180): avc: denied { read append } for pid=6106 comm="syz.0.98" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.486257][ T30] audit: type=1400 audit(1746187844.112:181): avc: denied { open } for pid=6106 comm="syz.0.98" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.576627][ T30] audit: type=1400 audit(1746187844.122:182): avc: denied { ioctl } for pid=6106 comm="syz.0.98" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.822596][ T5887] hid-multitouch 0003:1FD2:6007.0006: item fetching failed at offset 2/5 [ 76.840561][ T5887] hid-multitouch 0003:1FD2:6007.0006: probe with driver hid-multitouch failed with error -22 [ 76.903250][ T30] audit: type=1400 audit(1746187844.992:183): avc: denied { create } for pid=6119 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.979614][ T30] audit: type=1400 audit(1746187845.012:184): avc: denied { write } for pid=6119 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.000091][ T5815] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.064753][ T5906] usb 4-1: USB disconnect, device number 3 [ 77.130070][ T30] audit: type=1400 audit(1746187845.032:185): avc: denied { nlmsg_write } for pid=6119 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.216226][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.253497][ T5815] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 77.312329][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.364350][ T5815] usb 2-1: config 0 descriptor?? [ 77.515470][ T30] audit: type=1400 audit(1746187845.602:186): avc: denied { name_bind } for pid=6128 comm="syz.2.108" src=3617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 77.820239][ T5815] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 77.849671][ T5815] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 77.889078][ T5815] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 77.930819][ T5815] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 77.950613][ T5815] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 78.013068][ T5815] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 78.075855][ T5815] lenovo 0003:17EF:6047.0007: Failed to switch F7/9/11 mode: -71 [ 78.125140][ T5815] lenovo 0003:17EF:6047.0007: Failed to switch middle button: -71 [ 78.191482][ T5815] lenovo 0003:17EF:6047.0007: Fn-lock setting failed: -71 [ 78.251473][ T5815] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71 [ 78.338971][ T5815] usb 2-1: USB disconnect, device number 4 [ 79.207389][ T1866] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 79.216340][ T1866] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 79.416748][ C0] sched: DL replenish lagged too much [ 80.796088][ T1866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.849807][ T1866] usb 3-1: config 0 descriptor?? [ 81.019467][ T1866] usb 3-1: can't set config #0, error -71 [ 81.091724][ T1866] usb 3-1: USB disconnect, device number 2 [ 82.485373][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 82.485390][ T30] audit: type=1400 audit(1746187850.572:207): avc: denied { read } for pid=6213 comm="syz.4.147" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.603401][ T30] audit: type=1400 audit(1746187850.572:208): avc: denied { open } for pid=6213 comm="syz.4.147" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.603454][ T30] audit: type=1400 audit(1746187850.652:209): avc: denied { ioctl } for pid=6213 comm="syz.4.147" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.862032][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.966604][ T30] audit: type=1400 audit(1746187851.052:210): avc: denied { read write } for pid=6225 comm="syz.0.152" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.995084][ T30] audit: type=1400 audit(1746187851.062:211): avc: denied { open } for pid=6225 comm="syz.0.152" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.998284][ T30] audit: type=1400 audit(1746187851.092:212): avc: denied { setopt } for pid=6222 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.005744][ T30] audit: type=1400 audit(1746187851.092:213): avc: denied { ioctl } for pid=6225 comm="syz.0.152" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x5309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.006535][ T6226] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.688209][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 83.832957][ T30] audit: type=1400 audit(1746187851.922:214): avc: denied { create } for pid=6244 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.855031][ T30] audit: type=1400 audit(1746187851.942:215): avc: denied { write } for pid=6244 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.330704][ T30] audit: type=1400 audit(1746187852.422:216): avc: denied { create } for pid=6253 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.543071][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.507954][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.508074][ T5129] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 88.250530][ T5906] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.630168][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 88.759135][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.759161][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.759178][ T5906] usb 3-1: config 0 has no interface number 0 [ 101.498560][ T5906] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 101.498590][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.568933][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.580904][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.450750][ T5906] usb 3-1: config 0 descriptor?? [ 190.764647][ T5826] Bluetooth: hci3: command tx timeout [ 190.764691][ T5826] Bluetooth: hci2: command tx timeout [ 190.764717][ T5826] Bluetooth: hci4: command tx timeout [ 190.764743][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.764772][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 194.078480][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.090410][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.380188][ T5906] usb 3-1: can't set config #0, error -71 [ 249.128254][ T31] INFO: task kworker/1:5:5858 blocked for more than 150 seconds. [ 249.128281][ T31] Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 249.128294][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.128301][ T31] task:kworker/1:5 state:D stack:22648 pid:5858 tgid:5858 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 249.128356][ T31] Workqueue: events reg_todo [ 249.128378][ T31] Call Trace: [ 249.128385][ T31] [ 249.128397][ T31] __schedule+0x116f/0x5de0 [ 249.128418][ T31] ? find_held_lock+0x2b/0x80 [ 249.128453][ T31] ? __pfx___schedule+0x10/0x10 [ 249.128479][ T31] ? find_held_lock+0x2b/0x80 [ 249.128500][ T31] ? schedule+0x2d7/0x3a0 [ 249.128522][ T31] schedule+0xe7/0x3a0 [ 249.128542][ T31] schedule_preempt_disabled+0x13/0x30 [ 249.128563][ T31] __mutex_lock+0x6c7/0xb90 [ 249.128587][ T31] ? reg_process_self_managed_hints+0x95/0x1f0 [ 249.128616][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 249.128637][ T31] ? call_crda+0x1a6/0x3c0 [ 249.128658][ T31] ? mutex_is_locked+0x17/0x60 [ 249.128698][ T31] ? reg_process_self_managed_hints+0x95/0x1f0 [ 249.128725][ T31] reg_process_self_managed_hints+0x95/0x1f0 [ 249.128753][ T31] reg_todo+0x66f/0x900 [ 249.128772][ T31] ? rcu_is_watching+0x12/0xc0 [ 249.128796][ T31] process_one_work+0x9cc/0x1b70 [ 249.128822][ T31] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 249.128845][ T31] ? __pfx_process_one_work+0x10/0x10 [ 249.128869][ T31] ? assign_work+0x1a0/0x250 [ 249.128891][ T31] worker_thread+0x6c8/0xf10 [ 249.128916][ T31] ? __kthread_parkme+0x19e/0x250 [ 249.128941][ T31] ? __pfx_worker_thread+0x10/0x10 [ 249.128959][ T31] kthread+0x3c2/0x780 [ 249.128977][ T31] ? __pfx_kthread+0x10/0x10 [ 249.128992][ T31] ? __pfx_kthread+0x10/0x10 [ 249.129007][ T31] ? __pfx_kthread+0x10/0x10 [ 249.129022][ T31] ? __pfx_kthread+0x10/0x10 [ 249.129043][ T31] ? rcu_is_watching+0x12/0xc0 [ 249.129063][ T31] ? __pfx_kthread+0x10/0x10 [ 249.129080][ T31] ret_from_fork+0x45/0x80 [ 249.129097][ T31] ? __pfx_kthread+0x10/0x10 [ 249.129114][ T31] ret_from_fork_asm+0x1a/0x30 [ 249.129150][ T31] [ 249.129163][ T31] INFO: task syz.0.155:6238 blocked for more than 150 seconds. [ 249.129174][ T31] Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 249.129185][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.129191][ T31] task:syz.0.155 state:D stack:28856 pid:6238 tgid:6237 ppid:5813 task_flags:0x400040 flags:0x00000004 [ 249.129247][ T31] Call Trace: [ 249.129253][ T31] [ 249.129263][ T31] __schedule+0x116f/0x5de0 [ 249.129282][ T31] ? __kernel_text_address+0xd/0x40 [ 249.129300][ T31] ? unwind_get_return_address+0x59/0xa0 [ 249.129327][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 249.129357][ T31] ? __pfx___schedule+0x10/0x10 [ 249.129382][ T31] ? find_held_lock+0x2b/0x80 [ 249.129403][ T31] ? schedule+0x2d7/0x3a0 [ 249.129426][ T31] schedule+0xe7/0x3a0 [ 249.129446][ T31] schedule_timeout+0x257/0x290 [ 249.129463][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 249.129489][ T31] ? mark_held_locks+0x49/0x80 [ 249.129513][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.129534][ T31] ___down_common+0x2d8/0x460 [ 249.129556][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 249.129587][ T31] ? __pfx____down_common+0x10/0x10 [ 249.129619][ T31] __down+0x20/0x30 [ 249.129641][ T31] down+0x74/0xa0 [ 249.129662][ T31] console_lock+0x5b/0xa0 [ 249.129680][ T31] con_install+0x99/0x600 [ 249.129699][ T31] ? __pfx_con_install+0x10/0x10 [ 249.129721][ T31] ? __pfx_con_install+0x10/0x10 [ 249.129740][ T31] tty_init_dev.part.0+0x99/0x500 [ 249.129762][ T31] tty_open+0xa50/0xf90 [ 249.129786][ T31] ? __pfx_tty_open+0x10/0x10 [ 249.129806][ T31] ? chrdev_open+0x10b/0x6a0 [ 249.129827][ T31] ? __pfx_tty_open+0x10/0x10 [ 249.129845][ T31] chrdev_open+0x231/0x6a0 [ 249.129864][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 249.129883][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 249.129915][ T31] do_dentry_open+0x741/0x1c10 [ 249.129941][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 249.129963][ T31] vfs_open+0x82/0x3f0 [ 249.129986][ T31] path_openat+0x1e5e/0x2d40 [ 249.130022][ T31] ? __pfx_path_openat+0x10/0x10 [ 249.130061][ T31] do_filp_open+0x20b/0x470 [ 249.130088][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 249.130132][ T31] ? alloc_fd+0x471/0x7d0 [ 249.130165][ T31] do_sys_openat2+0x11b/0x1d0 [ 249.130185][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.130215][ T31] __x64_sys_openat+0x174/0x210 [ 249.130235][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 249.130258][ T31] ? do_user_addr_fault+0x843/0x1370 [ 249.130283][ T31] do_syscall_64+0xcd/0x260 [ 249.130308][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.130326][ T31] RIP: 0033:0x7fbd1998d2d0 [ 249.130341][ T31] RSP: 002b:00007fbd1a79bb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 249.130359][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fbd1998d2d0 [ 249.130370][ T31] RDX: 0000000000000002 RSI: 00007fbd1a79bc10 RDI: 00000000ffffff9c [ 249.130381][ T31] RBP: 00007fbd1a79bc10 R08: 0000000000000000 R09: 00007fbd1a79b987 [ 249.130392][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 249.130403][ T31] R13: 0000000000000001 R14: 00007fbd19bb5fa0 R15: 00007ffcba320e58 [ 249.130427][ T31] [ 249.130434][ T31] INFO: task syz.1.169:6267 blocked for more than 150 seconds. [ 249.130445][ T31] Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 [ 249.130456][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.130462][ T31] task:syz.1.169 state:D stack:27560 pid:6267 tgid:6266 ppid:5818 task_flags:0x400040 flags:0x00000004 [ 249.130515][ T31] Call Trace: [ 249.130521][ T31] [ 249.130531][ T31] __schedule+0x116f/0x5de0 [ 249.130551][ T31] ? save_trace+0x4e/0x380 [ 249.130577][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 249.130607][ T31] ? __pfx___schedule+0x10/0x10 [ 249.130632][ T31] ? find_held_lock+0x2b/0x80 [ 249.130653][ T31] ? schedule+0x2d7/0x3a0 [ 249.130676][ T31] schedule+0xe7/0x3a0 [ 249.130696][ T31] schedule_preempt_disabled+0x13/0x30 [ 249.130715][ T31] __mutex_lock+0x6c7/0xb90 [ 249.130740][ T31] ? ptmx_open+0xff/0x360 [ 249.130766][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 249.130787][ T31] ? __pfx_ida_alloc_range+0x10/0x10 [ 249.130810][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.130836][ T31] ? __pfx_devpts_acquire+0x10/0x10 [ 249.130866][ T31] ? __pfx_ptmx_open+0x10/0x10 [ 249.130890][ T31] ? ptmx_open+0xff/0x360 [ 249.130913][ T31] ptmx_open+0xff/0x360 [ 249.130938][ T31] ? __pfx_ptmx_open+0x10/0x10 [ 249.130962][ T31] chrdev_open+0x231/0x6a0 [ 249.130980][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 249.130999][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 249.131028][ T31] do_dentry_open+0x741/0x1c10 [ 249.131058][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 249.131081][ T31] vfs_open+0x82/0x3f0 [ 249.131103][ T31] path_openat+0x1e5e/0x2d40 [ 249.131138][ T31] ? __pfx_path_openat+0x10/0x10 [ 249.131171][ T31] do_filp_open+0x20b/0x470 [ 249.131198][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 249.131242][ T31] ? alloc_fd+0x471/0x7d0 [ 249.131275][ T31] do_sys_openat2+0x11b/0x1d0 [ 249.131293][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.131323][ T31] __x64_sys_openat+0x174/0x210 [ 249.131344][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 249.131366][ T31] ? do_user_addr_fault+0x843/0x1370 [ 249.131392][ T31] do_syscall_64+0xcd/0x260 [ 249.131415][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.131433][ T31] RIP: 0033:0x7ff12f98e969 [ 249.131445][ T31] RSP: 002b:00007ff13073e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.131462][ T31] RAX: ffffffffffffffda RBX: 00007ff12fbb5fa0 RCX: 00007ff12f98e969 [ 249.131473][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 249.131484][ T31] RBP: 00007ff12fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 249.131496][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.131506][ T31] R13: 0000000000000001 R14: 00007ff12fbb5fa0 R15: 00007ffd72ff91b8 [ 249.131530][ T31] [ 249.131539][ T31] [ 249.131539][ T31] Showing all locks held in the system: [ 249.131546][ T31] 2 locks held by kthreadd/2: [ 249.131557][ T31] 1 lock held by kworker/R-kvfre/6: [ 249.131567][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 249.131621][ T31] 2 locks held by kworker/0:0/9: [ 249.131631][ T31] 3 locks held by kworker/u8:0/12: [ 249.131642][ T31] 3 locks held by kworker/u8:1/13: [ 249.131651][ T31] 1 lock held by kworker/R-mm_pe/14: [ 249.131661][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 249.131716][ T31] 3 locks held by kworker/1:0/24: [ 249.131727][ T31] 1 lock held by khungtaskd/31: [ 249.131736][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 249.131788][ T31] 1 lock held by kworker/R-write/33: [ 249.131797][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.131841][ T31] 3 locks held by kworker/u8:2/36: [ 249.131852][ T31] 3 locks held by kworker/1:1/47: [ 249.131861][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.131906][ T31] #1: ffffc90000b87d18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.131950][ T31] #2: ffffffff901243e8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 249.132000][ T31] 5 locks held by kworker/u9:0/54: [ 249.132010][ T31] #0: ffff8880292ea148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.132060][ T31] #1: ffffc9000120fd18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.132104][ T31] #2: ffff88807ca18d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 249.132147][ T31] #3: ffff88807ca18078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x146/0xb40 [ 249.132199][ T31] #4: ffffffff903934c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 249.132242][ T31] 3 locks held by kworker/u8:3/55: [ 249.132253][ T31] 3 locks held by kworker/u8:4/70: [ 249.132264][ T31] 2 locks held by kswapd0/90: [ 249.132275][ T31] 3 locks held by kworker/u8:5/295: [ 249.132287][ T31] 3 locks held by kworker/0:2/951: [ 249.132298][ T31] 3 locks held by kworker/u8:6/1154: [ 249.132308][ T31] 6 locks held by kworker/1:2/1204: [ 249.132319][ T31] 3 locks held by kworker/0:3/1865: [ 249.132329][ T31] 3 locks held by kworker/0:4/1866: [ 249.132349][ T31] 3 locks held by kworker/R-ipv6_/3165: [ 249.132359][ T31] #0: ffff88814d2a1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.132404][ T31] #1: ffffc9000c3b7cb0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.132449][ T31] #2: ffffffff901243e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 249.132493][ T31] 1 lock held by kworker/R-bat_e/3395: [ 249.132504][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.132547][ T31] 3 locks held by kworker/u8:7/3436: [ 249.132558][ T31] 3 locks held by kworker/u8:8/3489: [ 249.132568][ T31] 3 locks held by kworker/u8:9/3604: [ 249.132578][ T31] 5 locks held by kworker/u9:1/5129: [ 249.132587][ T31] #0: ffff888033bfc948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.132631][ T31] #1: ffffc90010717d18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.132675][ T31] #2: ffff88807de94d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 249.132717][ T31] #3: ffff88807de94078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x146/0xb40 [ 249.132769][ T31] #4: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 249.132819][ T31] 1 lock held by syslogd/5170: [ 249.132829][ T31] 1 lock held by udevd/5188: [ 249.132839][ T31] 1 lock held by dhcpcd/5481: [ 249.132849][ T31] 5 locks held by dhcpcd/5482: [ 249.132859][ T31] 2 locks held by getty/5566: [ 249.132868][ T31] #0: ffff888032dd60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 249.132918][ T31] #1: ffffc900030062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 249.132967][ T31] 4 locks held by kworker/1:3/5815: [ 249.132977][ T31] 5 locks held by kworker/u9:3/5816: [ 249.132987][ T31] #0: ffff888033bfe148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.133031][ T31] #1: ffffc9000323fd18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.133080][ T31] #2: ffff88807df40d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 249.133122][ T31] #3: ffff88807df40078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x146/0xb40 [ 249.133173][ T31] #4: ffffffff903934c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 249.133215][ T31] 2 locks held by syz-executor/5819: [ 249.133225][ T31] 2 locks held by syz-executor/5821: [ 249.133235][ T31] 7 locks held by kworker/u9:5/5822: [ 249.133245][ T31] #0: ffff8880292eb948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.133288][ T31] #1: ffffc900031ffd18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.133333][ T31] #2: ffff888012d08d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 249.133375][ T31] #3: ffff888012d08078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x146/0xb40 [ 249.133426][ T31] #4: ffffffff903934c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 249.133466][ T31] #5: ffff8880326bbb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 249.133515][ T31] #6: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 249.133564][ T31] 1 lock held by kworker/R-wg-cr/5838: [ 249.133574][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.133617][ T31] 1 lock held by kworker/R-wg-cr/5839: [ 249.133628][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 249.133680][ T31] 1 lock held by kworker/R-wg-cr/5840: [ 249.133690][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.133733][ T31] 1 lock held by kworker/R-wg-cr/5841: [ 249.133743][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.133787][ T31] 1 lock held by kworker/R-wg-cr/5843: [ 249.133797][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.133841][ T31] 1 lock held by kworker/R-wg-cr/5844: [ 249.133851][ T31] 1 lock held by kworker/R-wg-cr/5846: [ 249.133861][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.133905][ T31] 1 lock held by kworker/R-wg-cr/5848: [ 249.133914][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.133958][ T31] 1 lock held by kworker/R-wg-cr/5849: [ 249.133968][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.134012][ T31] 1 lock held by kworker/R-wg-cr/5851: [ 249.134022][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 249.134079][ T31] 1 lock held by kworker/R-wg-cr/5852: [ 249.134089][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.134133][ T31] 1 lock held by kworker/R-wg-cr/5853: [ 249.134143][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 249.134195][ T31] 1 lock held by kworker/R-wg-cr/5854: [ 249.134205][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.134249][ T31] 1 lock held by kworker/R-wg-cr/5855: [ 249.134259][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.134301][ T31] 1 lock held by kworker/R-wg-cr/5856: [ 249.134311][ T31] #0: ffffffff8e2770c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 249.134355][ T31] 4 locks held by kworker/1:5/5858: [ 249.134365][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.134409][ T31] #1: ffffc9000319fd18 (reg_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.134452][ T31] #2: ffffffff901243e8 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x900 [ 249.134492][ T31] #3: ffff888027990768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x95/0x1f0 [ 249.134545][ T31] 3 locks held by kworker/0:6/5868: [ 249.134555][ T31] #0: ffff888034936148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.134604][ T31] #1: ffffc9000435fd18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.134665][ T31] #2: ffff88805d50e648 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe80 [ 249.134719][ T31] 3 locks held by kworker/1:6/5887: [ 249.134728][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 249.134772][ T31] #1: ffffc900030dfd18 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 249.134816][ T31] #2: ffffffff901243e8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 249.134860][ T31] 3 locks held by kworker/1:7/5905: [ 249.134870][ T31] 5 locks held by kworker/1:8/5906: [ 249.134881][ T31] 2 locks held by kworker/1:9/5915: [ 249.134892][ T31] 4 locks held by kworker/0:7/6047: [ 249.134902][ T31] 2 locks held by syz.4.147/6214: [ 249.134912][ T31] 2 locks held by kworker/0:8/6229: [ 249.134922][ T31] 2 locks held by syz.0.155/6238: [ 249.134931][ T31] #0: ffffffff8f0a5a28 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90 [ 249.134975][ T31] #1: ffff88801358d1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x37/0x500 [ 249.135020][ T31] 1 lock held by syz.1.169/6267: [ 249.135030][ T31] #0: ffffffff8f0a5a28 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0xff/0x360 [ 249.135083][ T31] 4 locks held by kworker/u8:10/6284: [ 249.135093][ T31] 2 locks held by kworker/u8:11/6285: [ 249.135104][ T31] 1 lock held by syz-executor/6288: [ 249.135114][ T31] [ 249.135118][ T31] ============================================= [ 249.135118][ T31] [ 249.135126][ T31] NMI backtrace for cpu 0 [ 249.135135][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 249.135154][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 249.135163][ T31] Call Trace: [ 249.135168][ T31] [ 249.135174][ T31] dump_stack_lvl+0x116/0x1f0 [ 249.135195][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 249.135212][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 249.135229][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 249.135246][ T31] watchdog+0xf70/0x12c0 [ 249.135267][ T31] ? __pfx_watchdog+0x10/0x10 [ 249.135281][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 249.135301][ T31] ? __kthread_parkme+0x19e/0x250 [ 249.135324][ T31] ? __pfx_watchdog+0x10/0x10 [ 249.135339][ T31] kthread+0x3c2/0x780 [ 249.135354][ T31] ? __pfx_kthread+0x10/0x10 [ 249.135367][ T31] ? __pfx_kthread+0x10/0x10 [ 249.135381][ T31] ? __pfx_kthread+0x10/0x10 [ 249.135395][ T31] ? __pfx_kthread+0x10/0x10 [ 249.135408][ T31] ? rcu_is_watching+0x12/0xc0 [ 249.135426][ T31] ? __pfx_kthread+0x10/0x10 [ 249.135442][ T31] ret_from_fork+0x45/0x80 [ 249.135456][ T31] ? __pfx_kthread+0x10/0x10 [ 249.135471][ T31] ret_from_fork_asm+0x1a/0x30 [ 249.135503][ T31] [ 249.135509][ T31] Sending NMI from CPU 0 to CPUs 1: [ 249.135532][ C1] NMI backtrace for cpu 1 [ 249.135542][ C1] CPU: 1 UID: 0 PID: 1204 Comm: kworker/1:2 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 249.135558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 249.135566][ C1] Workqueue: events_long defense_work_handler [ 249.135581][ C1] RIP: 0010:unwind_next_frame+0xe41/0x20a0 [ 249.135596][ C1] Code: 8d 78 20 e8 c1 e7 ff ff 49 8d 7d 40 48 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0f 0d 00 00 <49> 89 6d 40 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f [ 249.135608][ C1] RSP: 0018:ffffc90000a08158 EFLAGS: 00000246 [ 249.135617][ C1] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc90000a09000 [ 249.135625][ C1] RDX: 1ffff92000141041 RSI: ffffc90000a08c40 RDI: ffffc90000a08208 [ 249.135634][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 249.135641][ C1] R10: 0000000000000005 R11: 0000000000084ae0 R12: ffffc90000a08218 [ 249.135649][ C1] R13: ffffc90000a081c8 R14: ffffc90000a08c70 R15: ffffc90000a081fc [ 249.135657][ C1] FS: 0000000000000000(0000) GS:ffff888124ae2000(0000) knlGS:0000000000000000 [ 249.135671][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.135679][ C1] CR2: 00007fff4cd6dce8 CR3: 000000002ffbc000 CR4: 00000000003526f0 [ 249.135688][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.135695][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.135703][ C1] Call Trace: [ 249.135707][ C1] [ 249.135711][ C1] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 249.135732][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.135749][ C1] arch_stack_walk+0x94/0x100 [ 249.135766][ C1] ? __netif_receive_skb+0x1d/0x160 [ 249.135784][ C1] stack_trace_save+0x8e/0xc0 [ 249.135798][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 249.135814][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 249.135832][ C1] kasan_save_stack+0x33/0x60 [ 249.135850][ C1] ? kasan_save_stack+0x33/0x60 [ 249.135867][ C1] ? kasan_save_track+0x14/0x30 [ 249.135884][ C1] ? kasan_save_free_info+0x3b/0x60 [ 249.135899][ C1] ? __kasan_slab_free+0x51/0x70 [ 249.135910][ C1] ? kmem_cache_free+0x2d4/0x4d0 [ 249.135927][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 249.135942][ C1] ? consume_skb+0xcc/0x100 [ 249.135954][ C1] ? nft_synproxy_do_eval+0x943/0xd80 [ 249.135969][ C1] ? nft_do_chain+0x2e6/0x1920 [ 249.135982][ C1] ? nft_do_chain_inet+0x18a/0x340 [ 249.135994][ C1] ? nf_hook_slow+0xbb/0x200 [ 249.136011][ C1] ? nf_hook.constprop.0+0x422/0x750 [ 249.136025][ C1] ? ip6_input+0xe0/0x2f0 [ 249.136039][ C1] ? ipv6_rcv+0x265/0x680 [ 249.136052][ C1] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 249.136080][ C1] kasan_save_track+0x14/0x30 [ 249.136099][ C1] kasan_save_free_info+0x3b/0x60 [ 249.136114][ C1] __kasan_slab_free+0x51/0x70 [ 249.136125][ C1] kmem_cache_free+0x2d4/0x4d0 [ 249.136142][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 249.136159][ C1] kfree_skbmem+0x1a4/0x1f0 [ 249.136174][ C1] consume_skb+0xcc/0x100 [ 249.136188][ C1] nft_synproxy_do_eval+0x943/0xd80 [ 249.136203][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 249.136222][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 249.136237][ C1] nft_do_chain+0x2e6/0x1920 [ 249.136250][ C1] ? ip6t_do_table+0xbf0/0x1be0 [ 249.136264][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 249.136280][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 249.136306][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 249.136323][ C1] nft_do_chain_inet+0x18a/0x340 [ 249.136335][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 249.136348][ C1] ? nf_nat_ipv6_local_in+0x3ad/0x6b0 [ 249.136365][ C1] ? lock_acquire+0x179/0x350 [ 249.136383][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 249.136395][ C1] nf_hook_slow+0xbb/0x200 [ 249.136413][ C1] nf_hook.constprop.0+0x422/0x750 [ 249.136427][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 249.136442][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 249.136458][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 249.136476][ C1] ip6_input+0xe0/0x2f0 [ 249.136490][ C1] ? __pfx_ip6_input+0x10/0x10 [ 249.136504][ C1] ipv6_rcv+0x265/0x680 [ 249.136519][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 249.136532][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 249.136550][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 249.136568][ C1] ? lock_acquire+0x179/0x350 [ 249.136587][ C1] ? process_backlog+0x3f0/0x15e0 [ 249.136604][ C1] __netif_receive_skb+0x1d/0x160 [ 249.136621][ C1] process_backlog+0x442/0x15e0 [ 249.136640][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 249.136660][ C1] net_rx_action+0xa97/0x1010 [ 249.136685][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 249.136706][ C1] ? tmigr_handle_remote+0x132/0x380 [ 249.136727][ C1] ? mark_held_locks+0x49/0x80 [ 249.136747][ C1] handle_softirqs+0x216/0x8e0 [ 249.136767][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 249.136786][ C1] ? update_defense_level+0x5d0/0xf70 [ 249.136802][ C1] do_softirq+0xb2/0xf0 [ 249.136820][ C1] [ 249.136825][ C1] [ 249.136830][ C1] __local_bh_enable_ip+0x100/0x120 [ 249.136848][ C1] update_defense_level+0x5d5/0xf70 [ 249.136864][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 249.136886][ C1] defense_work_handler+0x26/0xd0 [ 249.136903][ C1] process_one_work+0x9cc/0x1b70 [ 249.136922][ C1] ? __pfx_defense_work_handler+0x10/0x10 [ 249.136938][ C1] ? __pfx_process_one_work+0x10/0x10 [ 249.136956][ C1] ? assign_work+0x1a0/0x250 [ 249.136972][ C1] worker_thread+0x6c8/0xf10 [ 249.136993][ C1] ? __pfx_worker_thread+0x10/0x10 [ 249.137008][ C1] kthread+0x3c2/0x780 [ 249.137023][ C1] ? __pfx_kthread+0x10/0x10 [ 249.137035][ C1] ? __pfx_kthread+0x10/0x10 [ 249.137048][ C1] ? __pfx_kthread+0x10/0x10 [ 249.137061][ C1] ? __pfx_kthread+0x10/0x10 [ 249.137075][ C1] ? rcu_is_watching+0x12/0xc0 [ 249.137093][ C1] ? __pfx_kthread+0x10/0x10 [ 249.137107][ C1] ret_from_fork+0x45/0x80 [ 249.137121][ C1] ? __pfx_kthread+0x10/0x10 [ 249.137135][ C1] ret_from_fork_asm+0x1a/0x30 [ 249.137161][ C1] [ 255.620201][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631855][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.681112][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 260.681137][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 260.681159][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 260.681169][ T31] Call Trace: [ 260.681176][ T31] [ 260.681184][ T31] dump_stack_lvl+0x3d/0x1f0 [ 260.681213][ T31] panic+0x71c/0x800 [ 260.681239][ T31] ? __pfx_panic+0x10/0x10 [ 260.681263][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 260.681284][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 260.681301][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 260.681319][ T31] ? watchdog+0xdda/0x12c0 [ 260.681334][ T31] ? watchdog+0xdcd/0x12c0 [ 260.681352][ T31] watchdog+0xdeb/0x12c0 [ 260.681373][ T31] ? __pfx_watchdog+0x10/0x10 [ 260.681387][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.681409][ T31] ? __kthread_parkme+0x19e/0x250 [ 260.681433][ T31] ? __pfx_watchdog+0x10/0x10 [ 260.681449][ T31] kthread+0x3c2/0x780 [ 260.681466][ T31] ? __pfx_kthread+0x10/0x10 [ 260.681479][ T31] ? __pfx_kthread+0x10/0x10 [ 260.681493][ T31] ? __pfx_kthread+0x10/0x10 [ 260.681507][ T31] ? __pfx_kthread+0x10/0x10 [ 260.681522][ T31] ? rcu_is_watching+0x12/0xc0 [ 260.681543][ T31] ? __pfx_kthread+0x10/0x10 [ 260.681559][ T31] ret_from_fork+0x45/0x80 [ 260.681574][ T31] ? __pfx_kthread+0x10/0x10 [ 260.681589][ T31] ret_from_fork_asm+0x1a/0x30 [ 260.681622][ T31] [ 260.681801][ T31] Kernel Offset: disabled