last executing test programs: 7.933412003s ago: executing program 1 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x1c5, 0x0, 0x4}]}) 7.623740841s ago: executing program 1 (id=18): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x62c21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 7.011328845s ago: executing program 1 (id=25): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)='1', 0x1) 6.820805555s ago: executing program 1 (id=28): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.312862586s ago: executing program 0 (id=35): syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x4, 0xf0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xf5, 0xffff, 0x4}, {0x6, 0x24, 0x1a, 0x800, 0x4}, [@mdlm_detail={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x3, 0x79}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x5}}}}}}}]}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 5.99338402s ago: executing program 1 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab90000000086dd60"], 0x0) 5.62483753s ago: executing program 1 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3\n', 0x2) 4.986861558s ago: executing program 0 (id=52): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)="b0", 0x1) 4.919493279s ago: executing program 0 (id=54): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4.404559225s ago: executing program 0 (id=61): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 4.296766058s ago: executing program 0 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:07.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='vp-vdpa', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:07.0', 0xc) 4.296623414s ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 3.211260554s ago: executing program 4 (id=82): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be6", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)="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", 0x2e6}], 0x1}}], 0x2, 0x0) socket$inet(0x2, 0x1, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.875195229s ago: executing program 4 (id=85): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd, 0xee}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r0, &(0x7f00000001c0), 0x0) 2.64853913s ago: executing program 4 (id=86): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 2.627072279s ago: executing program 4 (id=87): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b5, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.813077614s ago: executing program 2 (id=93): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x0, 0x170) close_range(r0, 0xffffffffffffffff, 0x0) 1.704950783s ago: executing program 2 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.693174165s ago: executing program 4 (id=96): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd, 0xee}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r0, &(0x7f00000001c0)='C', 0x1) 1.476496728s ago: executing program 2 (id=97): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="b0", 0x1) 1.34079731s ago: executing program 4 (id=98): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x4) 1.18331999s ago: executing program 2 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10) 955.705955ms ago: executing program 3 (id=101): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) listen(r0, 0x1ff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 694.959238ms ago: executing program 3 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 586.563381ms ago: executing program 3 (id=103): timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r1, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0xbffffffa) 400.393842ms ago: executing program 3 (id=104): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af030200010000000500000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18"], 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e"], 0x22) 241.368335ms ago: executing program 3 (id=105): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000700), 0x0) 225.545304ms ago: executing program 2 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x270f, @empty}, 0x80) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f"], 0x6a) 117.980781ms ago: executing program 3 (id=107): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4) 0s ago: executing program 2 (id=108): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd, 0xee}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r0, &(0x7f00000001c0)='C', 0x1) kernel console output (not intermixed with test programs): [ 54.697732][ T29] audit: type=1400 audit(1785245193.764:111): avc: denied { write } for pid=5458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.742090][ T29] audit: type=1400 audit(1785245193.804:112): avc: denied { write } for pid=5469 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.669143][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 55.669157][ T29] audit: type=1400 audit(1785245194.734:119): avc: denied { write } for pid=5514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.728621][ T29] audit: type=1400 audit(1785245194.794:120): avc: denied { write } for pid=5525 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.892052][ T29] audit: type=1400 audit(1785245194.954:121): avc: denied { write } for pid=5528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.942072][ T29] audit: type=1400 audit(1785245195.004:122): avc: denied { write } for pid=5539 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.114545][ T29] audit: type=1400 audit(1785245195.184:123): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.167204][ T29] audit: type=1400 audit(1785245195.234:124): avc: denied { write } for pid=5554 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.339705][ T29] audit: type=1400 audit(1785245195.404:125): avc: denied { write } for pid=5557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.391628][ T29] audit: type=1400 audit(1785245195.454:126): avc: denied { write } for pid=5568 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.650552][ T29] audit: type=1400 audit(1785245195.714:127): avc: denied { write } for pid=5571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.710938][ T29] audit: type=1400 audit(1785245195.774:128): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 61.629206][ T29] audit: type=1400 audit(1785245200.694:129): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.652895][ T29] audit: type=1400 audit(1785245200.714:130): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.656663][ T5592] cgroup: Unknown subsys name 'net' [ 61.681834][ T29] audit: type=1400 audit(1785245200.744:131): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.836010][ T5592] cgroup: Unknown subsys name 'cpuset' [ 61.844079][ T5592] cgroup: Unknown subsys name 'rlimit' [ 61.972540][ T29] audit: type=1400 audit(1785245201.034:132): avc: denied { setattr } for pid=5592 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.996263][ T29] audit: type=1400 audit(1785245201.034:133): avc: denied { create } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.024549][ T29] audit: type=1400 audit(1785245201.034:134): avc: denied { write } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.046725][ T29] audit: type=1400 audit(1785245201.034:135): avc: denied { read } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.091238][ T29] audit: type=1400 audit(1785245201.034:136): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.103495][ T5595] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 62.116228][ T29] audit: type=1400 audit(1785245201.034:137): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.148108][ T29] audit: type=1400 audit(1785245201.194:138): avc: denied { relabelto } for pid=5595 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.130924][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.275304][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.285917][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.293850][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.301859][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.310185][ T4925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.325661][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.333428][ T4925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.341024][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.349255][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.356978][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.357106][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.365322][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.375030][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.379368][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.391387][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.394282][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.400856][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.416285][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.416391][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.431182][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.439623][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.448511][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.449710][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.463240][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.472717][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.756086][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.763257][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.770382][ T5620] bridge_slave_0: entered allmulticast mode [ 66.777255][ T5620] bridge_slave_0: entered promiscuous mode [ 66.789358][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.796487][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.803665][ T5606] bridge_slave_0: entered allmulticast mode [ 66.810319][ T5606] bridge_slave_0: entered promiscuous mode [ 66.825251][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.832376][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.839745][ T5620] bridge_slave_1: entered allmulticast mode [ 66.846549][ T5620] bridge_slave_1: entered promiscuous mode [ 66.856819][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.863938][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.871220][ T5606] bridge_slave_1: entered allmulticast mode [ 66.878298][ T5606] bridge_slave_1: entered promiscuous mode [ 66.959193][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.976523][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.986173][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.994060][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.001186][ T5617] bridge_slave_0: entered allmulticast mode [ 67.008376][ T5617] bridge_slave_0: entered promiscuous mode [ 67.015459][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.022536][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.030052][ T5605] bridge_slave_0: entered allmulticast mode [ 67.036859][ T5605] bridge_slave_0: entered promiscuous mode [ 67.045983][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.055186][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.062278][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.069559][ T5614] bridge_slave_0: entered allmulticast mode [ 67.076261][ T5614] bridge_slave_0: entered promiscuous mode [ 67.085021][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.100743][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.108241][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.115423][ T5617] bridge_slave_1: entered allmulticast mode [ 67.122053][ T5617] bridge_slave_1: entered promiscuous mode [ 67.128743][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.135938][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.143108][ T5605] bridge_slave_1: entered allmulticast mode [ 67.149782][ T5605] bridge_slave_1: entered promiscuous mode [ 67.162100][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.169336][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.176488][ T5614] bridge_slave_1: entered allmulticast mode [ 67.183240][ T5614] bridge_slave_1: entered promiscuous mode [ 67.228662][ T5606] team0: Port device team_slave_0 added [ 67.248296][ T5620] team0: Port device team_slave_0 added [ 67.256405][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.266952][ T5606] team0: Port device team_slave_1 added [ 67.274518][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.285564][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.296312][ T5620] team0: Port device team_slave_1 added [ 67.303903][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.320211][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.337597][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.398577][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.405774][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.431856][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.444858][ T5617] team0: Port device team_slave_0 added [ 67.452302][ T5605] team0: Port device team_slave_0 added [ 67.458864][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.465849][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.483798][ T5608] Bluetooth: hci0: command tx timeout [ 67.492048][ T4925] Bluetooth: hci3: command tx timeout [ 67.498105][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.515363][ T5614] team0: Port device team_slave_0 added [ 67.526541][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.533744][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.559736][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.563501][ T5608] Bluetooth: hci1: command tx timeout [ 67.576542][ T4925] Bluetooth: hci4: command tx timeout [ 67.578436][ T5617] team0: Port device team_slave_1 added [ 67.582478][ T5622] Bluetooth: hci2: command tx timeout [ 67.598198][ T5605] team0: Port device team_slave_1 added [ 67.604239][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.611223][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.637288][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.649348][ T5614] team0: Port device team_slave_1 added [ 67.696533][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.703656][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.729627][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.741969][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.749461][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.775541][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.786966][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.793961][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.820201][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.838349][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.845335][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.871240][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.893649][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.900588][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.926465][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.944269][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.951223][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.977224][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.992089][ T5606] hsr_slave_0: entered promiscuous mode [ 67.998475][ T5606] hsr_slave_1: entered promiscuous mode [ 68.025465][ T5620] hsr_slave_0: entered promiscuous mode [ 68.031529][ T5620] hsr_slave_1: entered promiscuous mode [ 68.037884][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 68.043752][ T5620] Cannot create hsr debugfs directory [ 68.068233][ T5614] hsr_slave_0: entered promiscuous mode [ 68.074387][ T5614] hsr_slave_1: entered promiscuous mode [ 68.080243][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 68.085984][ T5614] Cannot create hsr debugfs directory [ 68.185682][ T5617] hsr_slave_0: entered promiscuous mode [ 68.191706][ T5617] hsr_slave_1: entered promiscuous mode [ 68.197868][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 68.203715][ T5617] Cannot create hsr debugfs directory [ 68.212836][ T5605] hsr_slave_0: entered promiscuous mode [ 68.219157][ T5605] hsr_slave_1: entered promiscuous mode [ 68.225219][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 68.230924][ T5605] Cannot create hsr debugfs directory [ 68.519573][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.530535][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.538739][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.548237][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.564131][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.574227][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.581830][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.590321][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.645220][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.655302][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.662955][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.673885][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.681611][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.690984][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.698962][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.707777][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.780325][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.789693][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.798766][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.807520][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.816645][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.826127][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.833951][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.842843][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.918135][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.957606][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.966973][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.975356][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.986534][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.996870][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.005766][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.015157][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.032664][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.041791][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.052476][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.059903][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.097668][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.117302][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.124408][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.146945][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.155777][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.174259][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.184255][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.191959][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.200830][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.208740][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.217881][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.230675][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.260192][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.267298][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.280366][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.287488][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.299155][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.327045][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.353085][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.360197][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.396283][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.403385][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.565010][ T5622] Bluetooth: hci0: command tx timeout [ 69.570996][ T5608] Bluetooth: hci3: command tx timeout [ 69.592454][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.626496][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.636781][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.644727][ T5622] Bluetooth: hci2: command tx timeout [ 69.650149][ T5608] Bluetooth: hci1: command tx timeout [ 69.655757][ T4925] Bluetooth: hci4: command tx timeout [ 69.688682][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.695838][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.724665][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.731816][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.784246][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.810408][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.818192][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.847547][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.854708][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.098782][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.237108][ T5606] veth0_vlan: entered promiscuous mode [ 70.279621][ T5606] veth1_vlan: entered promiscuous mode [ 70.351176][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.393861][ T5606] veth0_macvtap: entered promiscuous mode [ 70.416154][ T5606] veth1_macvtap: entered promiscuous mode [ 70.459440][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.478285][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.507180][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.556931][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.579161][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.610020][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.657305][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.721464][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.804914][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.808631][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.819912][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.851873][ T5614] veth0_vlan: entered promiscuous mode [ 70.874446][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.884686][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.901729][ T5614] veth1_vlan: entered promiscuous mode [ 70.912396][ T5620] veth0_vlan: entered promiscuous mode [ 70.919653][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 70.919668][ T29] audit: type=1400 audit(1785245209.984:153): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.AU4Uz2/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.936332][ T5620] veth1_vlan: entered promiscuous mode [ 70.951617][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.966818][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.974401][ T29] audit: type=1400 audit(1785245209.984:154): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.996928][ T29] audit: type=1400 audit(1785245209.984:155): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.AU4Uz2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.022813][ T29] audit: type=1400 audit(1785245209.984:156): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.050949][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.063104][ T29] audit: type=1400 audit(1785245210.024:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.AU4Uz2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.093229][ T5617] veth0_vlan: entered promiscuous mode [ 71.109065][ T29] audit: type=1400 audit(1785245210.024:158): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.AU4Uz2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.115911][ T5614] veth0_macvtap: entered promiscuous mode [ 71.144759][ T29] audit: type=1400 audit(1785245210.034:159): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.164590][ T29] audit: type=1400 audit(1785245210.034:160): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.184711][ T5605] veth0_vlan: entered promiscuous mode [ 71.190213][ T29] audit: type=1400 audit(1785245210.034:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.207891][ T5617] veth1_vlan: entered promiscuous mode [ 71.229579][ T5605] veth1_vlan: entered promiscuous mode [ 71.239152][ T29] audit: type=1400 audit(1785245210.034:162): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.270764][ T5614] veth1_macvtap: entered promiscuous mode [ 71.290674][ T5617] veth0_macvtap: entered promiscuous mode [ 71.318293][ T5617] veth1_macvtap: entered promiscuous mode [ 71.344137][ T5620] veth0_macvtap: entered promiscuous mode [ 71.371158][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.381398][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.399865][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.419146][ T5620] veth1_macvtap: entered promiscuous mode [ 71.432035][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.449018][ T5605] veth0_macvtap: entered promiscuous mode [ 71.470587][ T5605] veth1_macvtap: entered promiscuous mode [ 71.478461][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.487699][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.507610][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.516593][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.532109][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.541196][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.557628][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.585638][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.594666][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.628549][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.644078][ T5608] Bluetooth: hci0: command tx timeout [ 71.649720][ T5622] Bluetooth: hci3: command tx timeout [ 71.676922][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.707834][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.723734][ T4925] Bluetooth: hci4: command tx timeout [ 71.729343][ T5608] Bluetooth: hci2: command tx timeout [ 71.734788][ T5622] Bluetooth: hci1: command tx timeout [ 71.809038][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.819683][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.861091][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.878752][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.895660][ T1294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.947559][ T1294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.981988][ T1294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.991067][ T1294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.009077][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.024489][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.032006][ T5814] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 72.111461][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.141251][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.149716][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.158529][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.266755][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.287169][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.322094][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.368425][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.449103][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.481010][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.556952][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.591504][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.650568][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.692012][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.279436][ T5862] Zero length message leads to an empty skb [ 73.310670][ T5860] tipc: Started in network mode [ 73.315900][ T5860] tipc: Node identity b6b1f8993ff4, cluster identity 4711 [ 73.335850][ T5860] tipc: Enabled bearer , priority 0 [ 73.386557][ T5860] tipc: Disabling bearer [ 73.505866][ T5873] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 73.528404][ T5870] bond0: entered promiscuous mode [ 73.549067][ T5870] bond_slave_0: entered promiscuous mode [ 73.581668][ T5870] bond_slave_1: entered promiscuous mode [ 73.612581][ T5870] batadv0: entered promiscuous mode [ 73.621590][ T5870] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 73.649683][ T5873] syz_tun: entered promiscuous mode [ 73.707186][ T5873] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 73.724530][ T5622] Bluetooth: hci3: command tx timeout [ 73.726478][ T5608] Bluetooth: hci0: command tx timeout [ 73.803796][ T5608] Bluetooth: hci1: command tx timeout [ 73.809221][ T5622] Bluetooth: hci2: command tx timeout [ 73.809245][ T5622] Bluetooth: hci4: command tx timeout [ 74.490670][ T5919] tipc: Started in network mode [ 74.511150][ T5919] tipc: Node identity b25455a33e2e, cluster identity 4711 [ 74.521639][ T5919] tipc: Enabled bearer , priority 0 [ 74.592318][ T5919] tipc: Disabling bearer [ 74.907590][ T5938] syzkaller0: entered promiscuous mode [ 74.920387][ T5938] syzkaller0: entered allmulticast mode [ 74.995443][ T805] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.117639][ T5951] bond0: (slave syz_tun): Releasing backup interface [ 75.147131][ T5951] bridge0: port 3(syz_tun) entered blocking state [ 75.171155][ T5951] bridge0: port 3(syz_tun) entered disabled state [ 75.198313][ T5951] syz_tun: entered allmulticast mode [ 75.206649][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 75.424400][ T805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.447413][ T805] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 75.472764][ T805] usb 1-1: can't read configurations, error -71 [ 75.618889][ T5981] Bluetooth: MGMT ver 1.23 [ 75.626000][ T5978] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 75.634615][ T5978] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.644126][ T5978] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.652946][ T5978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.659137][ T5978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.667743][ T5978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.675981][ T5978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.682033][ T5978] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.689278][ T5978] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.698025][ T5978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.704428][ T5978] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.712726][ T5978] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.720288][ T5978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 75.727317][ T5978] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 75.734635][ T5978] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 75.911234][ T5988] tipc: Started in network mode [ 75.918564][ T5988] tipc: Node identity 222801df866e, cluster identity 4711 [ 75.925954][ T5988] tipc: Enabled bearer , priority 0 [ 75.936910][ T5988] tipc: Disabling bearer [ 75.993294][ T188] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 76.124618][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 76.124635][ T29] audit: type=1400 audit(1785245215.194:239): avc: denied { create } for pid=5995 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.152742][ T29] audit: type=1400 audit(1785245215.214:240): avc: denied { bind } for pid=5995 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.175431][ T29] audit: type=1400 audit(1785245215.214:241): avc: denied { write } for pid=5995 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.194744][ T188] usb 4-1: not running at top speed; connect to a high speed hub [ 76.210412][ T188] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 76.232547][ T188] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 76.242130][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.250605][ T188] usb 4-1: Product: syz [ 76.259322][ T188] usb 4-1: Manufacturer: syz [ 76.266063][ T188] usb 4-1: SerialNumber: syz [ 76.382801][ T188] oti6858 4-1:1.0: oti6858 converter detected [ 76.420695][ T188] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 76.616955][ T29] audit: type=1400 audit(1785245215.684:242): avc: denied { accept } for pid=6006 comm="syz.4.60" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.844831][ T6022] netlink: 'syz.2.66': attribute type 63 has an invalid length. [ 76.856435][ T29] audit: type=1400 audit(1785245215.924:243): avc: denied { create } for pid=6021 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.877457][ T29] audit: type=1400 audit(1785245215.924:244): avc: denied { bind } for pid=6021 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.897123][ T29] audit: type=1400 audit(1785245215.924:245): avc: denied { connect } for pid=6021 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.157928][ T29] audit: type=1400 audit(1785245216.224:246): avc: denied { write } for pid=6032 comm="syz.2.71" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.644520][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.655073][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 77.725132][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 77.725160][ T4925] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.732793][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.737439][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.792862][ T6054] kvm: vcpu 0: requested 24 ns lapic timer period limited to 200000 ns [ 77.802593][ T6054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 78.137366][ T29] audit: type=1400 audit(1785245217.204:247): avc: denied { read write } for pid=6065 comm="syz.4.85" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.179602][ T29] audit: type=1400 audit(1785245217.204:248): avc: denied { open } for pid=6065 comm="syz.4.85" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.646504][ T24] usb 4-1: USB disconnect, device number 2 [ 78.707533][ T24] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 78.720478][ T24] oti6858 4-1:1.0: device disconnected [ 78.947315][ T6077] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 79.723326][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.804459][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.804475][ T4925] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.804500][ T4925] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.810502][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 79.885115][ T5724] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 80.054815][ T5724] usb 5-1: not running at top speed; connect to a high speed hub [ 80.068687][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 80.095848][ T5724] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 80.111107][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.127111][ T5724] usb 5-1: Product: syz [ 80.134162][ T5724] usb 5-1: Manufacturer: syz [ 80.144072][ T5724] usb 5-1: SerialNumber: syz [ 80.166374][ T5724] oti6858 5-1:1.0: oti6858 converter detected [ 80.191601][ T5724] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 80.652502][ T5622] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19 [ 80.659923][ T5622] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 80.931665][ T6151] lo: entered allmulticast mode [ 80.942922][ T6151] bond0: entered allmulticast mode [ 80.960493][ T6151] dummy0: entered allmulticast mode [ 80.993854][ T6151] eql: entered allmulticast mode [ 81.030609][ T6151] ifb0: entered allmulticast mode [ 81.050844][ T6151] ifb1: entered allmulticast mode [ 81.068582][ T6151] virtio_net virtio1 eth0: entered allmulticast mode [ 81.110157][ T6151] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 81.145800][ T6151] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 81.184957][ T6151] hwsim0: entered allmulticast mode [ 81.210079][ T6151] ieee802154 phy0 wpan0: entered allmulticast mode [ 81.256391][ T6151] ieee802154 phy1 wpan1: entered allmulticast mode [ 81.281752][ T6151] teql0: entered allmulticast mode [ 81.301564][ T6151] tunl0: entered allmulticast mode [ 81.326169][ T6151] gre0: entered allmulticast mode [ 81.352008][ T6151] gretap0: entered allmulticast mode [ 81.383208][ T6151] erspan0: entered allmulticast mode [ 81.403400][ T6151] ip_vti0: entered allmulticast mode [ 81.415991][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 81.416006][ T29] audit: type=1400 audit(1785245220.484:344): avc: denied { write } for pid=6156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.448272][ T6151] ip6_vti0: entered allmulticast mode [ 81.453877][ T6151] sit0: entered allmulticast mode [ 81.459061][ T6151] ip6tnl0: entered allmulticast mode [ 81.464564][ T6151] ip6gre0: entered allmulticast mode [ 81.469999][ T6151] lapb0: entered allmulticast mode [ 81.475487][ T6151] lapb1: entered allmulticast mode [ 81.480753][ T6151] lapb2: entered allmulticast mode [ 81.486672][ T6151] lapb3: entered allmulticast mode [ 81.491932][ T6151] lapb4: entered allmulticast mode [ 81.497544][ T6151] lapb5: entered allmulticast mode [ 81.518243][ T6151] lowpan0: entered allmulticast mode [ 81.534416][ T29] audit: type=1400 audit(1785245220.604:345): avc: denied { write } for pid=6169 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.814365][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.883187][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.883206][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.889322][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.898544][ T4925] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.117886][ T29] audit: type=1400 audit(1785245221.184:346): avc: denied { write } for pid=6171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.236364][ T29] audit: type=1400 audit(1785245221.304:347): avc: denied { write } for pid=6194 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.313122][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.475551][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 82.491976][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 82.513530][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.534460][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.550260][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 82.576275][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 82.596601][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.618295][ T24] usb 3-1: config 0 descriptor?? [ 82.668041][ T5724] usb 5-1: USB disconnect, device number 2 [ 82.725507][ T5724] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 82.752536][ T29] audit: type=1400 audit(1785245221.814:348): avc: denied { write } for pid=6196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.777760][ T5724] oti6858 5-1:1.0: device disconnected [ 82.945394][ T29] audit: type=1400 audit(1785245222.014:349): avc: denied { write } for pid=6214 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.061710][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0001/input/input5 [ 83.160574][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0001/input/input6 [ 83.252320][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.277329][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.284079][ T24] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 83.330529][ T24] usb 3-1: USB disconnect, device number 2 [ 83.481999][ T6228] fido_id[6228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 83.501189][ T29] audit: type=1400 audit(1785245222.564:350): avc: denied { write } for pid=6221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.620916][ T29] audit: type=1400 audit(1785245222.684:351): avc: denied { write } for pid=6236 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.883329][ T4925] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.974897][ T29] audit: type=1400 audit(1785245223.044:352): avc: denied { write } for pid=6241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.077285][ T29] audit: type=1400 audit(1785245223.144:353): avc: denied { write } for pid=6252 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.288525][ T46] cfg80211: failed to load regulatory.db [ 86.430738][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 86.430754][ T29] audit: type=1400 audit(1785245225.494:373): avc: denied { write } for pid=6382 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.617628][ T29] audit: type=1400 audit(1785245225.684:374): avc: denied { write } for pid=6384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.662524][ T29] audit: type=1400 audit(1785245225.724:375): avc: denied { write } for pid=6395 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.844326][ T29] audit: type=1400 audit(1785245225.914:376): avc: denied { write } for pid=6397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.889003][ T29] audit: type=1400 audit(1785245225.954:377): avc: denied { write } for pid=6408 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.065935][ T29] audit: type=1400 audit(1785245226.134:378): avc: denied { write } for pid=6410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.120360][ T29] audit: type=1400 audit(1785245226.184:379): avc: denied { write } for pid=6421 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.297911][ T29] audit: type=1400 audit(1785245226.364:380): avc: denied { write } for pid=6423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.349067][ T29] audit: type=1400 audit(1785245226.414:381): avc: denied { write } for pid=6434 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.528287][ T29] audit: type=1400 audit(1785245226.594:382): avc: denied { write } for pid=6436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.163265][ T30] INFO: task syz.0.63:6015 blocked for more than 143 seconds. [ 225.170815][ T30] Not tainted syzkaller #0 [ 225.175829][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 225.184550][ T30] task:syz.0.63 state:D stack:27304 pid:6015 tgid:6014 ppid:5605 task_flags:0x400140 flags:0x00080002 [ 225.196557][ T30] Call Trace: [ 225.199835][ T30] [ 225.202749][ T30] __schedule+0x125c/0x6730 [ 225.207283][ T30] ? do_raw_spin_lock+0x128/0x260 [ 225.213115][ T30] ? __pfx___schedule+0x10/0x10 [ 225.218038][ T30] ? find_held_lock+0x2b/0x80 [ 225.222760][ T30] ? schedule+0x225/0x2c0 [ 225.227160][ T30] schedule+0xdd/0x2c0 [ 225.231252][ T30] schedule_preempt_disabled+0x13/0x30 [ 225.236761][ T30] __mutex_lock+0xccc/0x1bd0 [ 225.241371][ T30] ? write_versions+0x9d/0xba0 [ 225.246284][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 225.251345][ T30] ? __lock_acquire+0x49f/0x1a40 [ 225.256448][ T30] ? write_versions+0x9d/0xba0 [ 225.261234][ T30] write_versions+0x9d/0xba0 [ 225.265867][ T30] ? find_held_lock+0x2b/0x80 [ 225.270567][ T30] ? __pfx_write_versions+0x10/0x10 [ 225.275807][ T30] ? __pfx_write_versions+0x10/0x10 [ 225.281013][ T30] ? _copy_from_user+0x59/0xd0 [ 225.285801][ T30] ? __pfx_write_versions+0x10/0x10 [ 225.290999][ T30] nfsctl_transaction_write+0x106/0x1a0 [ 225.296585][ T30] vfs_write+0x2aa/0x1050 [ 225.300914][ T30] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 225.307025][ T30] ? __pfx_vfs_write+0x10/0x10 [ 225.311803][ T30] ? __fget_files+0x215/0x3d0 [ 225.317394][ T30] ? __fget_files+0x21f/0x3d0 [ 225.322101][ T30] ksys_write+0x12a/0x250 [ 225.326495][ T30] ? __pfx_ksys_write+0x10/0x10 [ 225.331359][ T30] do_syscall_64+0x115/0x870 [ 225.335982][ T30] ? clear_bhb_loop+0x40/0x90 [ 225.340670][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.346582][ T30] RIP: 0033:0x7f440bf9de99 [ 225.350994][ T30] RSP: 002b:00007f440cdc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.359450][ T30] RAX: ffffffffffffffda RBX: 00007f440c225fa0 RCX: 00007f440bf9de99 [ 225.367557][ T30] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000004 [ 225.375575][ T30] RBP: 00007f440c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 225.383657][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.391617][ T30] R13: 00007f440c226038 R14: 00007f440c225fa0 R15: 00007ffd15a5f878 [ 225.399644][ T30] [ 225.402663][ T30] INFO: task syz.0.63:6016 blocked for more than 143 seconds. [ 225.410238][ T30] Not tainted syzkaller #0 [ 225.415208][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 225.424715][ T30] task:syz.0.63 state:D stack:28776 pid:6016 tgid:6014 ppid:5605 task_flags:0x400040 flags:0x00080002 [ 225.436698][ T30] Call Trace: [ 225.439967][ T30] [ 225.442884][ T30] __schedule+0x125c/0x6730 [ 225.447463][ T30] ? do_raw_spin_lock+0x128/0x260 [ 225.452489][ T30] ? __pfx___schedule+0x10/0x10 [ 225.457360][ T30] ? find_held_lock+0x2b/0x80 [ 225.462051][ T30] ? schedule+0x225/0x2c0 [ 225.466405][ T30] schedule+0xdd/0x2c0 [ 225.470461][ T30] schedule_preempt_disabled+0x13/0x30 [ 225.476095][ T30] __mutex_lock+0xccc/0x1bd0 [ 225.480690][ T30] ? write_ports+0xa5/0xcc0 [ 225.485500][ T30] ? nfsctl_transaction_write+0xcd/0x1a0 [ 225.491181][ T30] ? ksys_write+0x12a/0x250 [ 225.495728][ T30] ? do_syscall_64+0x115/0x870 [ 225.500486][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 225.505543][ T30] ? write_ports+0xa5/0xcc0 [ 225.510050][ T30] ? __lock_acquire+0x49f/0x1a40 [ 225.515037][ T30] write_ports+0xa5/0xcc0 [ 225.520357][ T30] ? __pfx_write_ports+0x10/0x10 [ 225.525363][ T30] ? find_held_lock+0x2b/0x80 [ 225.530057][ T30] ? __might_fault+0xc5/0x140 [ 225.534734][ T30] ? __might_fault+0xc5/0x140 [ 225.539399][ T30] ? __pfx_write_ports+0x10/0x10 [ 225.544343][ T30] ? _copy_from_user+0x59/0xd0 [ 225.549122][ T30] ? __pfx_write_ports+0x10/0x10 [ 225.554069][ T30] nfsctl_transaction_write+0x106/0x1a0 [ 225.559612][ T30] vfs_write+0x2aa/0x1050 [ 225.564052][ T30] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 225.570246][ T30] ? __pfx_vfs_write+0x10/0x10 [ 225.575027][ T30] ? __fget_files+0x215/0x3d0 [ 225.579706][ T30] ? __fget_files+0x21f/0x3d0 [ 225.584530][ T30] ksys_write+0x12a/0x250 [ 225.588871][ T30] ? __pfx_ksys_write+0x10/0x10 [ 225.593759][ T30] do_syscall_64+0x115/0x870 [ 225.598347][ T30] ? clear_bhb_loop+0x40/0x90 [ 225.603173][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.609090][ T30] RIP: 0033:0x7f440bf9de99 [ 225.613669][ T30] RSP: 002b:00007f440cda3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.622599][ T30] RAX: ffffffffffffffda RBX: 00007f440c226090 RCX: 00007f440bf9de99 [ 225.630693][ T30] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 225.638713][ T30] RBP: 00007f440c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 225.646777][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.654802][ T30] R13: 00007f440c226128 R14: 00007f440c226090 R15: 00007ffd15a5f878 [ 225.662782][ T30] [ 225.665899][ T30] [ 225.665899][ T30] Showing all locks held in the system: [ 225.673655][ T30] 1 lock held by khungtaskd/30: [ 225.678483][ T30] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 225.688397][ T30] 2 locks held by getty/5369: [ 225.693083][ T30] #0: ffff888033d0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 225.702798][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 225.712931][ T30] 3 locks held by syz.1.46/5971: [ 225.717902][ T30] #0: ffff88807d2e3270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 225.727811][ T30] #1: ffff88802711e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 225.736965][ T30] #2: ffffffff8f0727a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 225.745811][ T30] 3 locks held by syz.0.63/6015: [ 225.750729][ T30] #0: ffff88807d302ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 225.759786][ T30] #1: ffff88802af3c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 225.768877][ T30] #2: ffffffff8f0727a0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 225.777951][ T30] 3 locks held by syz.0.63/6016: [ 225.782879][ T30] #0: ffff88807b981b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 225.791968][ T30] #1: ffff88802af3c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 225.801056][ T30] #2: ffffffff8f0727a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 225.809921][ T30] [ 225.812235][ T30] ============================================= [ 225.812235][ T30] [ 225.820677][ T30] NMI backtrace for cpu 0 [ 225.820691][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 225.820707][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 225.820716][ T30] Call Trace: [ 225.820722][ T30] [ 225.820727][ T30] dump_stack_lvl+0x100/0x190 [ 225.820751][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 225.820773][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 225.820797][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 225.820824][ T30] sys_info+0x141/0x190 [ 225.820846][ T30] watchdog+0xcb1/0x1030 [ 225.820879][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 225.820897][ T30] ? __pfx_watchdog+0x10/0x10 [ 225.820918][ T30] ? __kthread_parkme+0x18c/0x230 [ 225.820945][ T30] ? kthread+0x13a/0x450 [ 225.820960][ T30] ? __pfx_watchdog+0x10/0x10 [ 225.820978][ T30] kthread+0x370/0x450 [ 225.820994][ T30] ? __pfx_kthread+0x10/0x10 [ 225.821013][ T30] ret_from_fork+0x72b/0xd50 [ 225.821039][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 225.821065][ T30] ? __switch_to+0x800/0x10f0 [ 225.821083][ T30] ? __pfx_kthread+0x10/0x10 [ 225.821102][ T30] ret_from_fork_asm+0x1a/0x30 [ 225.821137][ T30] [ 225.821144][ T30] Sending NMI from CPU 0 to CPUs 1: [ 225.947334][ C1] NMI backtrace for cpu 1 [ 225.947348][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 225.947363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 225.947376][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 225.947395][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 225.947407][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 225.947419][ C1] RAX: 000000000012fa21 RBX: ffff88801ea82540 RCX: ffffffff8bbb22d5 [ 225.947427][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 225.947435][ C1] RBP: ffffed1003d504a8 R08: 0000000000000001 R09: ffffed10170a678d [ 225.947443][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 225.947451][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 225.947459][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 225.947472][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.947481][ C1] CR2: 000055911314d1f0 CR3: 000000000e994000 CR4: 00000000003526f0 [ 225.947489][ C1] Call Trace: [ 225.947493][ C1] [ 225.947498][ C1] default_idle+0x9/0x10 [ 225.947513][ C1] default_idle_call+0x6c/0xb0 [ 225.947528][ C1] do_idle+0x3a7/0x5b0 [ 225.947547][ C1] ? __pfx_do_idle+0x10/0x10 [ 225.947563][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 225.947584][ C1] cpu_startup_entry+0x4f/0x60 [ 225.947601][ C1] start_secondary+0x21d/0x2d0 [ 225.947619][ C1] ? __pfx_start_secondary+0x10/0x10 [ 225.947637][ C1] common_startup_64+0x13e/0x158 [ 225.947662][ C1] [ 226.119288][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 226.126222][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 226.135324][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 226.145373][ T30] Call Trace: [ 226.148631][ T30] [ 226.151535][ T30] dump_stack_lvl+0x100/0x190 [ 226.156191][ T30] vpanic+0x552/0x970 [ 226.160156][ T30] ? __pfx_vpanic+0x10/0x10 [ 226.164640][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 226.170773][ T30] panic+0xd1/0xe0 [ 226.174465][ T30] ? __pfx_panic+0x10/0x10 [ 226.178852][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 226.184982][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 226.191119][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 226.197260][ T30] ? watchdog.cold+0x1ec/0x234 [ 226.202018][ T30] ? watchdog+0xcc1/0x1030 [ 226.206426][ T30] watchdog.cold+0x1fd/0x234 [ 226.211000][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 226.216790][ T30] ? __pfx_watchdog+0x10/0x10 [ 226.221443][ T30] ? __kthread_parkme+0x18c/0x230 [ 226.226445][ T30] ? kthread+0x13a/0x450 [ 226.230659][ T30] ? __pfx_watchdog+0x10/0x10 [ 226.235313][ T30] kthread+0x370/0x450 [ 226.239380][ T30] ? __pfx_kthread+0x10/0x10 [ 226.243948][ T30] ret_from_fork+0x72b/0xd50 [ 226.248529][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 226.253616][ T30] ? __switch_to+0x800/0x10f0 [ 226.258263][ T30] ? __pfx_kthread+0x10/0x10 [ 226.262823][ T30] ret_from_fork_asm+0x1a/0x30 [ 226.267575][ T30] [ 226.270778][ T30] Kernel Offset: disabled [ 226.275085][ T30] Rebooting in 86400 seconds..