last executing test programs: 2.730539035s ago: executing program 2 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000001000000095"], 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x997}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 2.493096587s ago: executing program 2 (id=23): r0 = io_uring_setup(0x6ded, &(0x7f0000000000)={0x0, 0x4279, 0x8, 0x801, 0x296}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 2.132489368s ago: executing program 2 (id=28): socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x800, 0x10000, 0x1, 0x91}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2.063298064s ago: executing program 2 (id=29): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x78, 0x4, 0xfa, 0x8, 0xb89, 0x7, 0xe5b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x1, 0x60, 0x1, "", [{{0x9, 0x4, 0x90, 0x0, 0x0, 0x2f, 0x71, 0x7f, 0xe}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 1.788728016s ago: executing program 0 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) 1.507449898s ago: executing program 0 (id=38): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x20) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x4000) 1.42744044s ago: executing program 1 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 1.22649944s ago: executing program 4 (id=43): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.181769981s ago: executing program 0 (id=44): r0 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 1.121534245s ago: executing program 1 (id=45): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) 1.099378682s ago: executing program 4 (id=46): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) 1.095001883s ago: executing program 0 (id=47): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "48006246439c220f6ffecc3531919a57bc772f628c9aa314640b40e662"}, 0x2d) 1.043663386s ago: executing program 4 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 948.802412ms ago: executing program 4 (id=49): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x609}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", 0x0}, 0x20) 881.414512ms ago: executing program 4 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x30, r1, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x88}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}]}]}, 0x30}}, 0x0) 871.504952ms ago: executing program 0 (id=51): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x84) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) 822.803236ms ago: executing program 4 (id=52): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 799.366979ms ago: executing program 0 (id=53): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 735.32128ms ago: executing program 2 (id=54): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000340), 0x1003, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r0}, 0x38) 602.395196ms ago: executing program 1 (id=56): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 547.410202ms ago: executing program 1 (id=58): syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 487.318833ms ago: executing program 2 (id=59): r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x8da2, 0x2, 0x3, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) 419.993697ms ago: executing program 3 (id=60): memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 344.06052ms ago: executing program 1 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 340.638263ms ago: executing program 3 (id=62): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setns(0xc9, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 238.3272ms ago: executing program 3 (id=63): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7fff, 0x101, {0xffffffffffffffff}, {0xee00}, 0x91, 0x8}) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) 190.271462ms ago: executing program 1 (id=64): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) personality(0xfe47fef9f5ff7379) 141.24155ms ago: executing program 3 (id=65): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)='%pB \x00'}, 0x20) 71.982495ms ago: executing program 3 (id=66): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x11c2, 0x10000, 0x0, 0x51}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x4, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 0s ago: executing program 3 (id=67): mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002480)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x3, 0xb65, 0x6, 0x3, {0x4, 0x200, 0x7, 0xa6, 0x7, 0x79bf, 0xfffffffc, 0x2, 0x0, 0x6000, 0x2, 0x0, 0x0, 0xc9, 0xc4d3}}, {0x0, 0xd}}}, 0xa0) kernel console output (not intermixed with test programs): [ 59.484010][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 59.484026][ T31] audit: type=1400 audit(1790711684.087:123): avc: denied { write } for pid=5535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.547866][ T31] audit: type=1400 audit(1790711684.147:124): avc: denied { write } for pid=5546 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.762831][ T31] audit: type=1400 audit(1790711684.367:125): avc: denied { write } for pid=5549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.816692][ T31] audit: type=1400 audit(1790711684.417:126): avc: denied { write } for pid=5560 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.004242][ T31] audit: type=1400 audit(1790711685.607:127): avc: denied { write } for pid=5568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.072152][ T31] audit: type=1400 audit(1790711685.677:128): avc: denied { write } for pid=5579 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 65.872890][ T31] audit: type=1400 audit(1790711690.477:129): avc: denied { mounton } for pid=5586 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.874990][ T31] audit: type=1400 audit(1790711690.477:130): avc: denied { mount } for pid=5586 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.877095][ T5586] cgroup: Unknown subsys name 'net' [ 65.878466][ T31] audit: type=1400 audit(1790711690.477:131): avc: denied { unmount } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.031723][ T5586] cgroup: Unknown subsys name 'cpuset' [ 66.034246][ T5586] cgroup: Unknown subsys name 'rlimit' [ 66.153184][ T31] audit: type=1400 audit(1790711690.757:132): avc: denied { setattr } for pid=5586 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.153661][ T31] audit: type=1400 audit(1790711690.757:133): avc: denied { create } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.153894][ T31] audit: type=1400 audit(1790711690.757:134): avc: denied { write } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.154158][ T31] audit: type=1400 audit(1790711690.757:135): avc: denied { read } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.165789][ T31] audit: type=1400 audit(1790711690.767:136): avc: denied { mounton } for pid=5586 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.166366][ T31] audit: type=1400 audit(1790711690.767:137): avc: denied { mount } for pid=5586 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 66.307479][ T5588] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.307977][ T31] audit: type=1400 audit(1790711690.907:138): avc: denied { relabelto } for pid=5588 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.353850][ T5586] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.528272][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.544464][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.546575][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.560750][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.561065][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.561413][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.562044][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.564492][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.564718][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.564999][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.568254][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.568534][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.570451][ T4918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.572738][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.575215][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.575809][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.591544][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.599609][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.601653][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.602701][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.603228][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.605042][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.606122][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.609387][ T4918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.609847][ T4918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.167017][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.167145][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.167254][ T5597] bridge_slave_0: entered allmulticast mode [ 71.168602][ T5597] bridge_slave_0: entered promiscuous mode [ 71.186788][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.186876][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.187030][ T5598] bridge_slave_0: entered allmulticast mode [ 71.188556][ T5598] bridge_slave_0: entered promiscuous mode [ 71.233544][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.233626][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.233796][ T5597] bridge_slave_1: entered allmulticast mode [ 71.235473][ T5597] bridge_slave_1: entered promiscuous mode [ 71.237130][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.237225][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.237302][ T5598] bridge_slave_1: entered allmulticast mode [ 71.238549][ T5598] bridge_slave_1: entered promiscuous mode [ 71.323747][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.323843][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.323938][ T5603] bridge_slave_0: entered allmulticast mode [ 71.325389][ T5603] bridge_slave_0: entered promiscuous mode [ 71.327913][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.327999][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.328289][ T5603] bridge_slave_1: entered allmulticast mode [ 71.330348][ T5603] bridge_slave_1: entered promiscuous mode [ 71.397240][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.423363][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.425273][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.451924][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.452113][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.452192][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.452292][ T5604] bridge_slave_0: entered allmulticast mode [ 71.453676][ T5604] bridge_slave_0: entered promiscuous mode [ 71.462466][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.473991][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.474272][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.474574][ T5601] bridge_slave_0: entered allmulticast mode [ 71.476850][ T5601] bridge_slave_0: entered promiscuous mode [ 71.483128][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.508370][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.508452][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.508749][ T5604] bridge_slave_1: entered allmulticast mode [ 71.511483][ T5604] bridge_slave_1: entered promiscuous mode [ 71.551507][ T5598] team0: Port device team_slave_0 added [ 71.551691][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.551769][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.551865][ T5601] bridge_slave_1: entered allmulticast mode [ 71.554187][ T5601] bridge_slave_1: entered promiscuous mode [ 71.557936][ T5603] team0: Port device team_slave_0 added [ 71.600273][ T5597] team0: Port device team_slave_0 added [ 71.602307][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.604048][ T5598] team0: Port device team_slave_1 added [ 71.616392][ T5603] team0: Port device team_slave_1 added [ 71.630815][ T5597] team0: Port device team_slave_1 added [ 71.643716][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.660402][ T4918] Bluetooth: hci2: command tx timeout [ 71.660696][ T5599] Bluetooth: hci0: command tx timeout [ 71.660806][ T4918] Bluetooth: hci3: command tx timeout [ 71.661056][ T5599] Bluetooth: hci4: command tx timeout [ 71.661422][ T5607] Bluetooth: hci1: command tx timeout [ 71.679263][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.679283][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.679304][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.753152][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.753822][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.753836][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.753856][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.755838][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.756410][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.756422][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.756442][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.870204][ T5604] team0: Port device team_slave_0 added [ 71.870778][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.870792][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.870813][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.872666][ T5604] team0: Port device team_slave_1 added [ 71.881220][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.881235][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.881256][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.913702][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.913718][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.913739][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.921411][ T5601] team0: Port device team_slave_0 added [ 71.973401][ T5601] team0: Port device team_slave_1 added [ 71.975436][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.975451][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.975472][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.009707][ T5597] hsr_slave_0: entered promiscuous mode [ 72.011332][ T5597] hsr_slave_1: entered promiscuous mode [ 72.036627][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.036643][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.036664][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.058436][ T5603] hsr_slave_0: entered promiscuous mode [ 72.065839][ T5603] hsr_slave_1: entered promiscuous mode [ 72.066493][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 72.066571][ T5603] Cannot create hsr debugfs directory [ 72.075657][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.075674][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.075695][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.152059][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.152075][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.152096][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.174261][ T5604] hsr_slave_0: entered promiscuous mode [ 72.175207][ T5604] hsr_slave_1: entered promiscuous mode [ 72.175799][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 72.175815][ T5604] Cannot create hsr debugfs directory [ 72.182833][ T5598] hsr_slave_0: entered promiscuous mode [ 72.183680][ T5598] hsr_slave_1: entered promiscuous mode [ 72.184262][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 72.184280][ T5598] Cannot create hsr debugfs directory [ 72.346982][ T5601] hsr_slave_0: entered promiscuous mode [ 72.347549][ T5601] hsr_slave_1: entered promiscuous mode [ 72.347925][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 72.347943][ T5601] Cannot create hsr debugfs directory [ 72.697292][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.711902][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.714096][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.718333][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.721594][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.735316][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.737799][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.744555][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.814674][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.828778][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.830106][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.840707][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.841455][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.851584][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.853898][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.862201][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.961608][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.968181][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.992874][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.995313][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.995962][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.000189][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.001113][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.010234][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.094459][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.097097][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.120631][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.124356][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.128164][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.135718][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.148059][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.162842][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.168000][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.239063][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.253188][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.261243][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.267132][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.281580][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.283912][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.284991][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.287533][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.302702][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.306756][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.317785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.317900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.330789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.330881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.400734][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.424064][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.447736][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.447794][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.471121][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.471181][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.508356][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.538392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.538483][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.552059][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.580928][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.581708][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.614355][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 73.614371][ T31] audit: type=1400 audit(1790711698.217:152): avc: denied { sys_module } for pid=5597 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.695117][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.703490][ T5604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.738943][ T5607] Bluetooth: hci4: command tx timeout [ 73.738973][ T5607] Bluetooth: hci0: command tx timeout [ 73.738989][ T4918] Bluetooth: hci2: command tx timeout [ 73.740103][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.740188][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.749220][ T5607] Bluetooth: hci1: command tx timeout [ 73.749252][ T5607] Bluetooth: hci3: command tx timeout [ 73.814822][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.814907][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.858530][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.985570][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.018716][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.018891][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.054088][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.054179][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.450135][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.678489][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.901735][ T5604] veth0_vlan: entered promiscuous mode [ 74.952333][ T5604] veth1_vlan: entered promiscuous mode [ 74.979925][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.016658][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.105719][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.124759][ T5604] veth0_macvtap: entered promiscuous mode [ 75.146067][ T5604] veth1_macvtap: entered promiscuous mode [ 75.188215][ T5597] veth0_vlan: entered promiscuous mode [ 75.204240][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.205384][ T5601] veth0_vlan: entered promiscuous mode [ 75.222947][ T5598] veth0_vlan: entered promiscuous mode [ 75.235009][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.256050][ T5597] veth1_vlan: entered promiscuous mode [ 75.273447][ T5601] veth1_vlan: entered promiscuous mode [ 75.275615][ T5603] veth0_vlan: entered promiscuous mode [ 75.291748][ T5598] veth1_vlan: entered promiscuous mode [ 75.320747][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.324014][ T5603] veth1_vlan: entered promiscuous mode [ 75.379102][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.391543][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.391645][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.399229][ T5597] veth0_macvtap: entered promiscuous mode [ 75.444606][ T5598] veth0_macvtap: entered promiscuous mode [ 75.450430][ T5597] veth1_macvtap: entered promiscuous mode [ 75.462336][ T5598] veth1_macvtap: entered promiscuous mode [ 75.480639][ T5601] veth0_macvtap: entered promiscuous mode [ 75.510262][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.512528][ T5601] veth1_macvtap: entered promiscuous mode [ 75.518765][ T5603] veth0_macvtap: entered promiscuous mode [ 75.527323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.527353][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.548570][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.550309][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.571683][ T5603] veth1_macvtap: entered promiscuous mode [ 75.606235][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.623318][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.623340][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.626395][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.634974][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.671852][ T31] audit: type=1400 audit(1790711700.277:153): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.u0mKQp/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.672501][ T31] audit: type=1400 audit(1790711700.277:154): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.686887][ T31] audit: type=1400 audit(1790711700.287:155): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.u0mKQp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.693059][ T31] audit: type=1400 audit(1790711700.297:156): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.698360][ T31] audit: type=1400 audit(1790711700.297:157): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.u0mKQp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.708743][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.727573][ T31] audit: type=1400 audit(1790711700.327:158): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.u0mKQp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.749965][ T31] audit: type=1400 audit(1790711700.357:159): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.758707][ T31] audit: type=1400 audit(1790711700.357:160): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.768795][ T31] audit: type=1400 audit(1790711700.367:161): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="gadgetfs" ino=7803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.793590][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.819533][ T52] Bluetooth: hci3: command tx timeout [ 75.819567][ T52] Bluetooth: hci1: command tx timeout [ 75.819587][ T52] Bluetooth: hci2: command tx timeout [ 75.819607][ T52] Bluetooth: hci4: command tx timeout [ 75.839837][ T5607] Bluetooth: hci0: command tx timeout [ 75.891345][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891394][ T1165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891427][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891460][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891493][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891526][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891558][ T1165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891590][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891623][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891654][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891682][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.891713][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.978203][ T5604] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.116914][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.116933][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.211171][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.211190][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.272257][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.272277][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.304924][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.342695][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.342717][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.364453][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.369024][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.445678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.445697][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.538217][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.538239][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.544523][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.616336][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.616355][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.741091][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.741111][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.837912][ T5797] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 76.837937][ T5797] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 77.049838][ T5803] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 77.049935][ T5803] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.242391][ T5807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.289817][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.661150][ T5713] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.824132][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 77.827484][ T5713] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 77.847950][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.847979][ T5713] usb 2-1: Product: syz [ 77.847993][ T5713] usb 2-1: Manufacturer: syz [ 77.848006][ T5713] usb 2-1: SerialNumber: syz [ 77.888956][ T5713] usb 2-1: config 0 descriptor?? [ 77.899622][ T5607] Bluetooth: hci0: command tx timeout [ 77.899653][ T5607] Bluetooth: hci4: command tx timeout [ 77.899673][ T5607] Bluetooth: hci2: command tx timeout [ 77.899692][ T5607] Bluetooth: hci1: command tx timeout [ 77.899713][ T5607] Bluetooth: hci3: command tx timeout [ 78.035795][ T5834] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 78.082383][ T5836] Illegal XDP return value 9 on prog (id 6) dev N/A, expect packet loss! [ 78.374138][ T5713] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 78.374169][ T5713] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 78.454273][ T5713] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 78.481595][ T5713] usb 2-1: USB disconnect, device number 2 [ 78.642127][ T31] kauditd_printk_skb: 49 callbacks suppressed [ 78.642157][ T31] audit: type=1400 audit(1790711703.247:211): avc: denied { create } for pid=5855 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.644299][ T31] audit: type=1400 audit(1790711703.247:212): avc: denied { bind } for pid=5855 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.646103][ T31] audit: type=1400 audit(1790711703.247:213): avc: denied { read } for pid=5856 comm="syz.2.29" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.647130][ T31] audit: type=1400 audit(1790711703.247:214): avc: denied { open } for pid=5856 comm="syz.2.29" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.647538][ T31] audit: type=1400 audit(1790711703.247:215): avc: denied { setopt } for pid=5855 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.910393][ T31] audit: type=1400 audit(1790711703.517:216): avc: denied { read } for pid=5865 comm="syz.0.33" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.910653][ T31] audit: type=1400 audit(1790711703.517:217): avc: denied { open } for pid=5865 comm="syz.0.33" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.913675][ T31] audit: type=1400 audit(1790711703.517:218): avc: denied { ioctl } for pid=5865 comm="syz.0.33" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.076317][ T31] audit: type=1400 audit(1790711703.677:219): avc: denied { ioctl } for pid=5870 comm="syz.1.35" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9367 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.200896][ T5720] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 79.326724][ T31] audit: type=1400 audit(1790711703.927:220): avc: denied { execute } for pid=5876 comm="syz.0.38" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 79.396115][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.396165][ T5720] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=e5.b4 [ 79.398126][ T5720] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 79.398160][ T5720] usb 3-1: can't read configurations, error -71 [ 79.753708][ T5897] SELinux: ebitmap: truncated map [ 79.753917][ T5897] SELinux: failed to load policy [ 80.150907][ T5921] loop9: detected capacity change from 0 to 524287998 [ 80.478776][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 80.496173][ T5936] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 81.424512][ T1622] cfg80211: failed to load regulatory.db [ 127.500062][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.500130][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.943524][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.943597][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.138890][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 196.138920][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 196.139820][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 196.151035][ T5599] Bluetooth: hci2: command 0x0406 tx timeout [ 196.151068][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 229.259921][ T32] INFO: task syz.4.52:5907 blocked in I/O wait for more than 143 seconds. [ 229.259964][ T32] Not tainted syzkaller #0 [ 229.259975][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.259982][ T32] task:syz.4.52 state:D stack:27128 pid:5907 tgid:5907 ppid:5597 task_flags:0x440040 flags:0x00080002 [ 229.260050][ T32] Call Trace: [ 229.260056][ T32] [ 229.260068][ T32] __schedule+0x1259/0x6920 [ 229.260115][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 229.260155][ T32] ? __pfx___schedule+0x10/0x10 [ 229.260181][ T32] ? find_held_lock+0x2b/0x80 [ 229.260210][ T32] ? schedule+0x225/0x2c0 [ 229.260242][ T32] schedule+0xdd/0x2c0 [ 229.260269][ T32] io_schedule+0x8a/0xf0 [ 229.260297][ T32] bit_wait_io+0xd/0xe0 [ 229.260315][ T32] __wait_on_bit+0x65/0x180 [ 229.260334][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 229.260353][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 229.260373][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 229.260397][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 229.260425][ T32] do_get_write_access+0x836/0x11e0 [ 229.260464][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 229.260493][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 229.260526][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 229.260558][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 229.260586][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 229.260611][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 229.260638][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 229.260667][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 229.260697][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 229.260730][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 229.260755][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 229.260775][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 229.260793][ T32] ext4_dirty_inode+0xd9/0x130 [ 229.260808][ T32] ? rcu_is_watching+0x13/0xc0 [ 229.260827][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 229.260844][ T32] file_update_time_flags+0x49c/0x520 [ 229.260859][ T32] ext4_page_mkwrite+0x324/0x1860 [ 229.260875][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 229.260891][ T32] do_page_mkwrite+0x17a/0x440 [ 229.260907][ T32] do_fault+0x659/0x1830 [ 229.260921][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 229.260940][ T32] ? __pfx_do_fault+0x10/0x10 [ 229.260954][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 229.260965][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 229.260975][ T32] ? __pte_offset_map+0x179/0x310 [ 229.260992][ T32] __handle_mm_fault+0x150b/0x2f60 [ 229.261012][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 229.261029][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.261050][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 229.261076][ T32] handle_mm_fault+0x363/0xa20 [ 229.261097][ T32] do_user_addr_fault+0x59c/0x12f0 [ 229.261118][ T32] exc_page_fault+0x6f/0xd0 [ 229.261130][ T32] asm_exc_page_fault+0x26/0x30 [ 229.261142][ T32] RIP: 0033:0x7f62444727a9 [ 229.261157][ T32] RSP: 002b:00007ffc06418250 EFLAGS: 00010202 [ 229.261169][ T32] RAX: 0000001b32e1b000 RBX: ffffffff8bc95ff4 RCX: 0000001b32e1aff8 [ 229.261177][ T32] RDX: 0000001b3282421c RSI: 0000000000000008 RDI: 00007f6245355720 [ 229.261251][ T32] RBP: 0000000000000075 R08: 00007f6244810000 R09: 00007f6244812000 [ 229.261263][ T32] R10: 000000008bc95ff8 R11: 0000000000000003 R12: 00007f6244826038 [ 229.261275][ T32] R13: 000000000000008a R14: ffffffff8bc95298 R15: 00007f6245355720 [ 229.261287][ T32] ? mtree_range_walk+0x1b8/0xb70 [ 229.261313][ T32] ? mt_dump+0x114/0x1b0 [ 229.261345][ T32] [ 229.261353][ T32] INFO: task syz.0.53:5909 blocked in I/O wait for more than 143 seconds. [ 229.261366][ T32] Not tainted syzkaller #0 [ 229.261376][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.261382][ T32] task:syz.0.53 state:D stack:24568 pid:5909 tgid:5909 ppid:5603 task_flags:0x440040 flags:0x00080002 [ 229.261462][ T32] Call Trace: [ 229.261468][ T32] [ 229.261479][ T32] __schedule+0x1259/0x6920 [ 229.261503][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 229.261524][ T32] ? lock_acquire+0x1d1/0x380 [ 229.261538][ T32] ? __pfx___schedule+0x10/0x10 [ 229.261554][ T32] ? find_held_lock+0x2b/0x80 [ 229.261572][ T32] ? schedule+0x225/0x2c0 [ 229.261591][ T32] schedule+0xdd/0x2c0 [ 229.261608][ T32] io_schedule+0x8a/0xf0 [ 229.261625][ T32] bit_wait_io+0xd/0xe0 [ 229.261636][ T32] __wait_on_bit+0x65/0x180 [ 229.261648][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 229.261660][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 229.261672][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 229.261685][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 229.261702][ T32] do_get_write_access+0x836/0x11e0 [ 229.261726][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 229.261743][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 229.261763][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 229.261784][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 229.261803][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 229.261817][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 229.261835][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 229.261851][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 229.261867][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 229.261883][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 229.261899][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 229.261911][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 229.261922][ T32] ext4_dirty_inode+0xd9/0x130 [ 229.261932][ T32] ? rcu_is_watching+0x13/0xc0 [ 229.261949][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 229.261975][ T32] file_update_time_flags+0x49c/0x520 [ 229.261990][ T32] ext4_page_mkwrite+0x324/0x1860 [ 229.262006][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 229.262022][ T32] do_page_mkwrite+0x17a/0x440 [ 229.262037][ T32] do_fault+0x659/0x1830 [ 229.262052][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 229.262070][ T32] ? __pfx_do_fault+0x10/0x10 [ 229.262084][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 229.262095][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 229.262105][ T32] ? __pte_offset_map+0x179/0x310 [ 229.262122][ T32] __handle_mm_fault+0x150b/0x2f60 [ 229.262142][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 229.262159][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.262180][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 229.262206][ T32] handle_mm_fault+0x363/0xa20 [ 229.262232][ T32] do_user_addr_fault+0x59c/0x12f0 [ 229.262253][ T32] exc_page_fault+0x6f/0xd0 [ 229.262265][ T32] asm_exc_page_fault+0x26/0x30 [ 229.262277][ T32] RIP: 0033:0x7f36130727a9 [ 229.262287][ T32] RSP: 002b:00007fffcbb83fe0 EFLAGS: 00010202 [ 229.262296][ T32] RAX: 0000001b32a17000 RBX: ffffffff81cd253e RCX: 0000001b32a16ff8 [ 229.262304][ T32] RDX: 0000001b3242421c RSI: 0000000000000008 RDI: 00007f3613f55720 [ 229.262312][ T32] RBP: 0000000000000087 R08: 00007f3613410000 R09: 00007f3613412000 [ 229.262319][ T32] R10: 0000000081cd2542 R11: 0000000000000002 R12: 00007f3613426038 [ 229.262326][ T32] R13: 0000000000000089 R14: ffffffff81cd2e44 R15: 00007f3613f55720 [ 229.262334][ T32] ? do_signal_stop+0x174/0x6d0 [ 229.262348][ T32] ? ptrace_do_notify+0x16e/0x1f0 [ 229.262366][ T32] [ 229.262373][ T32] INFO: task syz.2.59:5925 blocked in I/O wait for more than 143 seconds. [ 229.262381][ T32] Not tainted syzkaller #0 [ 229.262387][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.262392][ T32] task:syz.2.59 state:D stack:27128 pid:5925 tgid:5925 ppid:5601 task_flags:0x440040 flags:0x00080002 [ 229.262425][ T32] Call Trace: [ 229.262428][ T32] [ 229.262434][ T32] __schedule+0x1259/0x6920 [ 229.262451][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 229.262471][ T32] ? lock_acquire+0x1d1/0x380 [ 229.262485][ T32] ? __pfx___schedule+0x10/0x10 [ 229.262501][ T32] ? find_held_lock+0x2b/0x80 [ 229.262518][ T32] ? schedule+0x225/0x2c0 [ 229.262537][ T32] schedule+0xdd/0x2c0 [ 229.262554][ T32] io_schedule+0x8a/0xf0 [ 229.262571][ T32] bit_wait_io+0xd/0xe0 [ 229.262582][ T32] __wait_on_bit+0x65/0x180 [ 229.262593][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 229.262605][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 229.262617][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 229.262631][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 229.262648][ T32] do_get_write_access+0x836/0x11e0 [ 229.262680][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 229.262698][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 229.262718][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 229.262737][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 229.262756][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 229.262770][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 229.262788][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 229.262804][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 229.262819][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 229.262835][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 229.262851][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 229.262863][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 229.262874][ T32] ext4_dirty_inode+0xd9/0x130 [ 229.262884][ T32] ? rcu_is_watching+0x13/0xc0 [ 229.262900][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 229.262916][ T32] file_update_time_flags+0x49c/0x520 [ 229.262930][ T32] ext4_page_mkwrite+0x324/0x1860 [ 229.262946][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 229.262959][ T32] ? find_held_lock+0x2b/0x80 [ 229.262977][ T32] do_page_mkwrite+0x17a/0x440 [ 229.262992][ T32] do_fault+0x659/0x1830 [ 229.263007][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 229.263024][ T32] ? __pfx_do_fault+0x10/0x10 [ 229.263038][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 229.263049][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 229.263059][ T32] ? __pte_offset_map+0x179/0x310 [ 229.263075][ T32] __handle_mm_fault+0x150b/0x2f60 [ 229.263095][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 229.263113][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.263133][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 229.263159][ T32] handle_mm_fault+0x363/0xa20 [ 229.263180][ T32] do_user_addr_fault+0x59c/0x12f0 [ 229.263200][ T32] exc_page_fault+0x6f/0xd0 [ 229.263211][ T32] asm_exc_page_fault+0x26/0x30 [ 229.263227][ T32] RIP: 0033:0x7f4ef1272f32 [ 229.263236][ T32] RSP: 002b:00007ffca8d1acf0 EFLAGS: 00010202 [ 229.263245][ T32] RAX: 000000000000d008 RBX: 00007f4ef2155720 RCX: 0000000000000000 [ 229.263252][ T32] RDX: 0000001b32c17000 RSI: 0000000000000008 RDI: 00007f4ef2155720 [ 229.263259][ T32] RBP: 00000000000002ad R08: 00007f4ef1610000 R09: 00007f4ef1625f40 [ 229.263266][ T32] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff87900050 [ 229.263273][ T32] R13: 00007f4ef1625f40 R14: 000000000000007e R15: ffffffffffff3000 [ 229.263282][ T32] ? usb_alloc_urb+0x80/0xa0 [ 229.263303][ T32] [ 229.263308][ T32] INFO: task syz.1.64:5937 blocked in I/O wait for more than 143 seconds. [ 229.263316][ T32] Not tainted syzkaller #0 [ 229.263322][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.263326][ T32] task:syz.1.64 state:D stack:27128 pid:5937 tgid:5937 ppid:5598 task_flags:0x440040 flags:0x00080002 [ 229.263357][ T32] Call Trace: [ 229.263361][ T32] [ 229.263367][ T32] __schedule+0x1259/0x6920 [ 229.263384][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 229.263404][ T32] ? lock_acquire+0x1d1/0x380 [ 229.263417][ T32] ? __pfx___schedule+0x10/0x10 [ 229.263433][ T32] ? find_held_lock+0x2b/0x80 [ 229.263450][ T32] ? schedule+0x225/0x2c0 [ 229.263469][ T32] schedule+0xdd/0x2c0 [ 229.263486][ T32] io_schedule+0x8a/0xf0 [ 229.263503][ T32] bit_wait_io+0xd/0xe0 [ 229.263514][ T32] __wait_on_bit+0x65/0x180 [ 229.263525][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 229.263538][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 229.263549][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 229.263563][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 229.263578][ T32] do_get_write_access+0x836/0x11e0 [ 229.263599][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 229.263616][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 229.263635][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 229.263655][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 229.263674][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 229.263688][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 229.263706][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 229.263721][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 229.263737][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 229.263753][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 229.263769][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 229.263781][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 229.263791][ T32] ext4_dirty_inode+0xd9/0x130 [ 229.263801][ T32] ? rcu_is_watching+0x13/0xc0 [ 229.263817][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 229.263833][ T32] file_update_time_flags+0x49c/0x520 [ 229.263847][ T32] ext4_page_mkwrite+0x324/0x1860 [ 229.263862][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 229.263873][ T32] ? do_wp_page+0x17e0/0x45c0 [ 229.263892][ T32] do_page_mkwrite+0x17a/0x440 [ 229.263906][ T32] do_fault+0x659/0x1830 [ 229.263921][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 229.263938][ T32] ? __pfx_do_fault+0x10/0x10 [ 229.263952][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 229.263963][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 229.263973][ T32] ? __pte_offset_map+0x179/0x310 [ 229.263989][ T32] __handle_mm_fault+0x150b/0x2f60 [ 229.264009][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 229.264026][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.264047][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 229.264073][ T32] handle_mm_fault+0x363/0xa20 [ 229.264094][ T32] do_user_addr_fault+0x59c/0x12f0 [ 229.264113][ T32] exc_page_fault+0x6f/0xd0 [ 229.264125][ T32] asm_exc_page_fault+0x26/0x30 [ 229.264136][ T32] RIP: 0033:0x7f4a058727a9 [ 229.264144][ T32] RSP: 002b:00007ffd8aa62dd0 EFLAGS: 00010202 [ 229.264153][ T32] RAX: 0000001b32b23000 RBX: ffffffff828bf74e RCX: 0000001b32b22ff8 [ 229.264160][ T32] RDX: 0000001b3252421c RSI: 0000000000000008 RDI: 00007f4a06755720 [ 229.264168][ T32] RBP: 00000000000001e6 R08: 00007f4a05c10000 R09: 00007f4a05c12000 [ 229.264175][ T32] R10: 00000000828bf752 R11: 0000000000000002 R12: 00007f4a05c26128 [ 229.264182][ T32] R13: 0000000000000206 R14: ffffffff828bf690 R15: 00007f4a06755720 [ 229.264189][ T32] ? lookup_page_ext+0x10/0x100 [ 229.264206][ T32] ? lookup_page_ext+0xce/0x100 [ 229.264230][ T32] [ 229.264235][ T32] INFO: task syz.3.67:5944 blocked in I/O wait for more than 143 seconds. [ 229.264243][ T32] Not tainted syzkaller #0 [ 229.264248][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.264252][ T32] task:syz.3.67 state:D stack:27128 pid:5944 tgid:5944 ppid:5604 task_flags:0x440040 flags:0x00080002 [ 229.264284][ T32] Call Trace: [ 229.264288][ T32] [ 229.264294][ T32] __schedule+0x1259/0x6920 [ 229.264310][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 229.264326][ T32] ? mark_held_locks+0x40/0x70 [ 229.264344][ T32] ? __pfx___schedule+0x10/0x10 [ 229.264360][ T32] ? find_held_lock+0x2b/0x80 [ 229.264377][ T32] ? schedule+0x225/0x2c0 [ 229.264396][ T32] schedule+0xdd/0x2c0 [ 229.264413][ T32] io_schedule+0x8a/0xf0 [ 229.264430][ T32] bit_wait_io+0xd/0xe0 [ 229.264441][ T32] __wait_on_bit+0x65/0x180 [ 229.264452][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 229.264464][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 229.264476][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 229.264489][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 229.264505][ T32] do_get_write_access+0x836/0x11e0 [ 229.264526][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 229.264542][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 229.264562][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 229.264582][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 229.264600][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 229.264614][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 229.264632][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 229.264647][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 229.264663][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 229.264679][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 229.264695][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 229.264707][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 229.264718][ T32] ext4_dirty_inode+0xd9/0x130 [ 229.264728][ T32] ? rcu_is_watching+0x13/0xc0 [ 229.264744][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 229.264760][ T32] file_update_time_flags+0x49c/0x520 [ 229.264774][ T32] ext4_page_mkwrite+0x324/0x1860 [ 229.264789][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 229.264805][ T32] do_page_mkwrite+0x17a/0x440 [ 229.264820][ T32] do_fault+0x659/0x1830 [ 229.264834][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 229.264850][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 229.264869][ T32] ? __pfx_do_fault+0x10/0x10 [ 229.264884][ T32] ? pgd_none+0x9f/0xe0 [ 229.264900][ T32] ? __pfx_pgd_none+0x10/0x10 [ 229.264917][ T32] ? lock_acquire+0x1d1/0x380 [ 229.264932][ T32] __handle_mm_fault+0x150b/0x2f60 [ 229.264952][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 229.264969][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.264989][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 229.265015][ T32] handle_mm_fault+0x363/0xa20 [ 229.265036][ T32] do_user_addr_fault+0x59c/0x12f0 [ 229.265056][ T32] exc_page_fault+0x6f/0xd0 [ 229.265067][ T32] asm_exc_page_fault+0x26/0x30 [ 229.265078][ T32] RIP: 0033:0x7f2f00a72809 [ 229.265087][ T32] RSP: 002b:00007ffecdc89670 EFLAGS: 00010202 [ 229.265096][ T32] RAX: 0000001b32d24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 229.265103][ T32] RDX: 0000001b32d23ffc RSI: 00000000005ffde8 RDI: 00007f2f01955700 [ 229.265110][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2f00e12000 [ 229.265117][ T32] R10: 00007f2f01955700 R11: 0000000000000000 R12: 0000000000000000 [ 229.265124][ T32] R13: 0000000000000e70 R14: ffffffff81afa5e0 R15: 00007f2f01955720 [ 229.265131][ T32] ? fpregs_assert_state_consistent+0xb0/0x150 [ 229.265157][ T32] [ 229.265170][ T32] [ 229.265170][ T32] Showing all locks held in the system: [ 229.265180][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 229.265188][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 229.265227][ T32] locks held by kworker/u8:2/42: 2, on CPU#1: [ 229.265235][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 229.265268][ T32] #1: ffffc90000b27d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 229.265309][ T32] locks held by kworker/u8:9/1213: 7, on CPU#1: [ 229.265317][ T32] #0: ffff88801d2e5940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 229.265349][ T32] #1: ffffc900050f7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 229.265382][ T32] #2: ffff888037cf60e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 229.265415][ T32] #3: ffff888037cf4c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 229.265443][ T32] #4: ffff888037cf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 229.265471][ T32] #5: ffff88807f950218 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x45a/0xdd0 [ 229.265504][ T32] #6: ffffe8ffffd29130 (&lg->lg_mutex){+.+.}-{4:4}, at: ext4_mb_initialize_context+0x811/0xdd0 [ 229.265561][ T32] locks held by getty/5356: 2, on CPU#1: [ 229.265569][ T32] #0: ffff888037c730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 229.265598][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 229.265625][ T32] locks held by syz-executor/5586: 3, on CPU#1: [ 229.265633][ T32] #0: ffff888070489a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.265668][ T32] #1: ffff888037cf6558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 229.265696][ T32] #2: ffff888037cf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 229.265741][ T32] locks held by syz.4.52/5907: 3, on CPU#1: [ 229.265748][ T32] #0: ffff88805ba55a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.265780][ T32] #1: ffff888037cf6558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 229.265807][ T32] #2: ffff888037cf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 229.265836][ T32] locks held by syz.0.53/5909: 3, on CPU#1: [ 229.265844][ T32] #0: ffff88805ba3a088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.265875][ T32] #1: ffff888037cf6558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 229.265903][ T32] #2: ffff888037cf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 229.265931][ T32] locks held by syz.2.59/5925: 3, on CPU#0: [ 229.265939][ T32] #0: ffff88805bad2a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.265970][ T32] #1: ffff888037cf6558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 229.265998][ T32] #2: ffff888037cf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 229.266026][ T32] locks held by syz.1.64/5937: 3, on CPU#1: [ 229.266034][ T32] #0: ffff888059d01808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.266065][ T32] #1: ffff888037cf6558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 229.266093][ T32] #2: ffff888037cf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 229.266121][ T32] locks held by syz.3.67/5944: 3, on CPU#0: [ 229.266129][ T32] #0: ffff888059c47d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.266160][ T32] #1: ffff888037cf6558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 229.266188][ T32] #2: ffff888037cf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 229.266220][ T32] [ 229.266222][ T32] ============================================= [ 229.266222][ T32] [ 229.266234][ T32] NMI backtrace for cpu 1 [ 229.266251][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 229.266264][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.266270][ T32] Call Trace: [ 229.266274][ T32] [ 229.266278][ T32] dump_stack_lvl+0x100/0x190 [ 229.266296][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 229.266314][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 229.266328][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 229.266347][ T32] sys_info+0x141/0x190 [ 229.266361][ T32] watchdog+0xcb1/0x1030 [ 229.266378][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 229.266396][ T32] ? __pfx_watchdog+0x10/0x10 [ 229.266410][ T32] ? __kthread_parkme+0x18f/0x230 [ 229.266425][ T32] ? kthread+0x13a/0x450 [ 229.266440][ T32] ? __pfx_watchdog+0x10/0x10 [ 229.266452][ T32] kthread+0x373/0x450 [ 229.266467][ T32] ? __pfx_kthread+0x10/0x10 [ 229.266483][ T32] ret_from_fork+0x730/0xd60 [ 229.266497][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 229.266510][ T32] ? __switch_to+0x800/0x10f0 [ 229.266527][ T32] ? __pfx_kthread+0x10/0x10 [ 229.266543][ T32] ret_from_fork_asm+0x1a/0x30 [ 229.266562][ T32] [ 229.266566][ T32] Sending NMI from CPU 1 to CPUs 0: [ 229.266604][ C0] NMI backtrace for cpu 0 [ 229.266615][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 229.266634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.266643][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 229.266661][ C0] Code: 47 93 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 38 19 00 fb f4 0c 50 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 229.266676][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000246 [ 229.266689][ C0] RAX: 00000000001969f3 RBX: ffffffff8ea91580 RCX: ffffffff8bd28215 [ 229.266700][ C0] RDX: 0000000000000001 RSI: ffffffff8e38e957 RDI: ffffffff8c623980 [ 229.266711][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed10170867bd [ 229.266727][ C0] R10: ffff8880b8433deb R11: 0000000000000001 R12: 0000000000000000 [ 229.266737][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 229.266748][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 229.266764][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.266775][ C0] CR2: 000055df5d96d620 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 229.266786][ C0] Call Trace: [ 229.266791][ C0] [ 229.266796][ C0] default_idle+0x9/0x10 [ 229.266814][ C0] default_idle_call+0x6c/0xb0 [ 229.266832][ C0] do_idle+0x3ae/0x5b0 [ 229.266854][ C0] ? __pfx_do_idle+0x10/0x10 [ 229.266875][ C0] ? do_idle+0x392/0x5b0 [ 229.266898][ C0] cpu_startup_entry+0x4f/0x60 [ 229.266919][ C0] rest_init+0x2d3/0x2e0 [ 229.266939][ C0] ? __pfx_rest_init+0x10/0x10 [ 229.266957][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 229.266974][ C0] ? lock_acquire+0x1d1/0x380 [ 229.266996][ C0] ? __pfx_kernel_init+0x10/0x10 [ 229.267017][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 229.267035][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 229.267053][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 229.267072][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 229.267093][ C0] start_kernel+0x48e/0x490 [ 229.267112][ C0] x86_64_start_reservations+0x24/0x30 [ 229.267132][ C0] x86_64_start_kernel+0x12b/0x130 [ 229.267152][ C0] common_startup_64+0x13e/0x158 [ 229.267180][ C0] [ 229.267592][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 231.712329][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 231.721423][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.731462][ T32] Call Trace: [ 231.734727][ T32] [ 231.737641][ T32] dump_stack_lvl+0x100/0x190 [ 231.742314][ T32] vpanic+0x553/0x970 [ 231.746278][ T32] ? __pfx_vpanic+0x10/0x10 [ 231.750771][ T32] panic+0xd1/0xe0 [ 231.754474][ T32] ? __pfx_panic+0x10/0x10 [ 231.758872][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 231.763887][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 231.770032][ T32] ? watchdog.cold+0x1ec/0x234 [ 231.774792][ T32] watchdog.cold+0x1fd/0x234 [ 231.779376][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 231.785174][ T32] ? __pfx_watchdog+0x10/0x10 [ 231.789839][ T32] ? __kthread_parkme+0x18f/0x230 [ 231.794855][ T32] ? kthread+0x13a/0x450 [ 231.799084][ T32] ? __pfx_watchdog+0x10/0x10 [ 231.803745][ T32] kthread+0x373/0x450 [ 231.807806][ T32] ? __pfx_kthread+0x10/0x10 [ 231.812387][ T32] ret_from_fork+0x730/0xd60 [ 231.816964][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 231.822063][ T32] ? __switch_to+0x800/0x10f0 [ 231.826731][ T32] ? __pfx_kthread+0x10/0x10 [ 231.831314][ T32] ret_from_fork_asm+0x1a/0x30 [ 231.836072][ T32] [ 231.839313][ T32] Kernel Offset: disabled [ 231.843620][ T32] Rebooting in 86400 seconds..