last executing test programs: 31.667058428s ago: executing program 2 (id=85): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e28, 0x80, @dev={0xfe, 0x80, '\x00', 0x15}, 0x2009}, 0x1c) listen(r1, 0x0) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) msgsnd(0x0, 0x0, 0x2000, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) r6 = getegid() r7 = msgget$private(0x0, 0x20) msgctl$IPC_SET(r7, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, r6, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x108, 0x7f, 0x3}) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r8, 0x541c, &(0x7f0000000000)) 29.64557162s ago: executing program 2 (id=100): r0 = io_uring_setup(0x1, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x8000001, 0x2, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0x6}}, 0x1) 28.882809619s ago: executing program 2 (id=103): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) 25.807061196s ago: executing program 4 (id=122): unshare(0x2c020400) r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x10) 25.707195556s ago: executing program 4 (id=123): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee40fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0x7, 0x1, "bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.564660558s ago: executing program 4 (id=138): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) 23.500465075s ago: executing program 4 (id=140): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001b80)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="40111b000000a3a601"], 0x0, 0x0}) 20.972927746s ago: executing program 3 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@any, 0x1}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 20.398143415s ago: executing program 4 (id=154): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000240)={0x0, 0x1, 0x10}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x3c}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)="55ee47dd4f070400000000008257", 0xe}], 0x1}, 0x8810) syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008fd07040040000102030109026e0003010640080904000000010100000a240104001800020102092403020001050508052404050809040101010101"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) preadv(r1, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000480)={0x1, @pix={0x2a52cc03, 0x2, 0x50424752, 0x2, 0x2, 0x6, 0x6, 0x80000005, 0x1, 0x0, 0x0, 0x5000000}}) r8 = fsopen(0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f00000002c0)=@ethtool_dump={0x3e, 0xa, 0x9, 0x5d, "4d14c016d9faf3e31e9f4a13618f5a78805221fa854c113a46d41c8970722e55d76ece208db8d7572bd5016eb28662d8173e50d3c2cbaa11accadca54d90de30e95c4153f66f547a0072f667f16f491adfbeddf24e62aefc79ccb3d219"}}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x27}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) fsmount(r8, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket$inet(0x2, 0x3, 0x2) 19.500757908s ago: executing program 3 (id=156): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 19.441535635s ago: executing program 2 (id=157): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) migrate_pages(0x0, 0xfc, 0x0, 0x0) 18.937002203s ago: executing program 1 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x101042, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000140)='i', 0x1, 0xc}]) 18.767713006s ago: executing program 3 (id=159): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0403d11, 0x0) 18.63472131s ago: executing program 1 (id=160): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 18.582790816s ago: executing program 2 (id=161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x14, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00'}, 0x18) 18.129055s ago: executing program 3 (id=162): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x8, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f0247b800003f42", 0x2a, 0x0, 0x0, 0x2}]) 17.998903496s ago: executing program 1 (id=163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x3, 0x2, 0x1, 0xffffffffffffffad, 0x1}]}, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 17.847555623s ago: executing program 0 (id=164): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.781208187s ago: executing program 1 (id=165): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f0000000140)='BA', 0x2) 17.730662132s ago: executing program 3 (id=166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendto(0xffffffffffffffff, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@any, 0x1}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 17.54264983s ago: executing program 2 (id=167): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) 17.316892303s ago: executing program 1 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() ioprio_get$pid(0x2, r0) sched_getscheduler(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x8910, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r7 = gettid() rt_tgsigqueueinfo(0x0, r7, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(0x0, r7, 0x36, &(0x7f0000000180)={0xa, 0x8, 0x29b}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fcntl$setown(r2, 0x8, r7) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x40, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x40048d0}, 0x40000) 17.213191128s ago: executing program 0 (id=169): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x10, @remote, 0x9}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001480), 0x0, 0x0, 0x270}}], 0x2, 0x4001c00) 16.938940603s ago: executing program 0 (id=170): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 16.694668761s ago: executing program 0 (id=171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) 16.611002047s ago: executing program 3 (id=172): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x2, 'Yf'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="400a03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.499361145s ago: executing program 0 (id=173): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0xf36, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x3f5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x5, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0x2, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r3, 0x0, 0x1, 0xfffffdff}}}}, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r0, r1, 0x0) write$binfmt_format(r5, &(0x7f0000000040)='0\x00', 0x2) 16.20216055s ago: executing program 4 (id=174): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) write(0xffffffffffffffff, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 15.994640468s ago: executing program 0 (id=175): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 13.948973174s ago: executing program 1 (id=176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) setns(0xc9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000240)={0x7, 0x687}) gettid() 0s ago: executing program 32 (id=167): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): [ 47.621943][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 47.621960][ T31] audit: type=1400 audit(1790375780.926:119): avc: denied { write } for pid=5509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.680398][ T31] audit: type=1400 audit(1790375780.986:120): avc: denied { write } for pid=5520 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.840424][ T31] audit: type=1400 audit(1790375781.146:121): avc: denied { write } for pid=5523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.892448][ T31] audit: type=1400 audit(1790375781.196:122): avc: denied { write } for pid=5534 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.060226][ T31] audit: type=1400 audit(1790375781.366:123): avc: denied { write } for pid=5537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.121433][ T31] audit: type=1400 audit(1790375781.426:124): avc: denied { write } for pid=5548 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.287161][ T31] audit: type=1400 audit(1790375781.596:125): avc: denied { write } for pid=5551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.341152][ T31] audit: type=1400 audit(1790375781.646:126): avc: denied { write } for pid=5562 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.516865][ T31] audit: type=1400 audit(1790375781.816:127): avc: denied { write } for pid=5565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.574015][ T31] audit: type=1400 audit(1790375781.876:128): avc: denied { write } for pid=5576 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 54.936553][ T31] audit: type=1400 audit(1790375788.236:129): avc: denied { mounton } for pid=5588 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.960751][ T31] audit: type=1400 audit(1790375788.276:130): avc: denied { mount } for pid=5588 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.962766][ T5588] cgroup: Unknown subsys name 'net' [ 54.963785][ T31] audit: type=1400 audit(1790375788.276:131): avc: denied { unmount } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.089847][ T5588] cgroup: Unknown subsys name 'cpuset' [ 55.092169][ T5588] cgroup: Unknown subsys name 'rlimit' [ 55.199282][ T31] audit: type=1400 audit(1790375788.506:132): avc: denied { setattr } for pid=5588 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.199655][ T31] audit: type=1400 audit(1790375788.506:133): avc: denied { create } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.199846][ T31] audit: type=1400 audit(1790375788.506:134): avc: denied { write } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.200071][ T31] audit: type=1400 audit(1790375788.506:135): avc: denied { read } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 55.220874][ T31] audit: type=1400 audit(1790375788.526:136): avc: denied { mounton } for pid=5588 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.220915][ T31] audit: type=1400 audit(1790375788.526:137): avc: denied { mount } for pid=5588 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.312167][ T5590] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 55.313296][ T31] audit: type=1400 audit(1790375788.616:138): avc: denied { relabelto } for pid=5590 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.254840][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.286101][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.317592][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.319675][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.319763][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.320175][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.320783][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.321075][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.322300][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.322730][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.323281][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.323502][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.324167][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.324323][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.324522][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.324722][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.324983][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.332847][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.333350][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.334791][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.335432][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.336310][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.336505][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.338650][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.340337][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.355130][ T4920] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.625493][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.625627][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.626225][ T5604] bridge_slave_0: entered allmulticast mode [ 59.637518][ T5604] bridge_slave_0: entered promiscuous mode [ 59.640601][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.640670][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.641344][ T5604] bridge_slave_1: entered allmulticast mode [ 59.642729][ T5604] bridge_slave_1: entered promiscuous mode [ 59.740941][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.741008][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.741082][ T5602] bridge_slave_0: entered allmulticast mode [ 59.742144][ T5602] bridge_slave_0: entered promiscuous mode [ 59.752047][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.754252][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.773933][ T5604] team0: Port device team_slave_0 added [ 59.775787][ T5604] team0: Port device team_slave_1 added [ 59.794449][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.794464][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.794482][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.796431][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.796441][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.796458][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.883246][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.883458][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.883544][ T5602] bridge_slave_1: entered allmulticast mode [ 59.885426][ T5602] bridge_slave_1: entered promiscuous mode [ 59.930747][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.930845][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.930901][ T5599] bridge_slave_0: entered allmulticast mode [ 59.931621][ T5599] bridge_slave_0: entered promiscuous mode [ 59.933776][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.933853][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.934190][ T5599] bridge_slave_1: entered allmulticast mode [ 59.935287][ T5599] bridge_slave_1: entered promiscuous mode [ 59.941525][ T5604] hsr_slave_0: entered promiscuous mode [ 59.942274][ T5604] hsr_slave_1: entered promiscuous mode [ 60.003386][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.003488][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.003545][ T5610] bridge_slave_0: entered allmulticast mode [ 60.004237][ T5610] bridge_slave_0: entered promiscuous mode [ 60.030438][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.030508][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.032263][ T5610] bridge_slave_1: entered allmulticast mode [ 60.034946][ T5610] bridge_slave_1: entered promiscuous mode [ 60.040824][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.044485][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.092589][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.092957][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.093032][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.093311][ T5598] bridge_slave_0: entered allmulticast mode [ 60.094385][ T5598] bridge_slave_0: entered promiscuous mode [ 60.140994][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.141209][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.141269][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.141346][ T5598] bridge_slave_1: entered allmulticast mode [ 60.142525][ T5598] bridge_slave_1: entered promiscuous mode [ 60.154798][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.157793][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.159232][ T5602] team0: Port device team_slave_0 added [ 60.189446][ T5602] team0: Port device team_slave_1 added [ 60.219768][ T5610] team0: Port device team_slave_0 added [ 60.243087][ T5599] team0: Port device team_slave_0 added [ 60.256542][ T5610] team0: Port device team_slave_1 added [ 60.268446][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.268458][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.268481][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.289373][ T5599] team0: Port device team_slave_1 added [ 60.301505][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.304009][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.304431][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.304440][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.304457][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.341346][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.341360][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.341378][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.378078][ T5613] Bluetooth: hci1: command tx timeout [ 60.378162][ T5613] Bluetooth: hci3: command tx timeout [ 60.378207][ T5613] Bluetooth: hci0: command tx timeout [ 60.385252][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.385265][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.385289][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.387762][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.387773][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.387791][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.401831][ T5598] team0: Port device team_slave_0 added [ 60.437145][ T5611] Bluetooth: hci4: command tx timeout [ 60.442782][ T5611] Bluetooth: hci2: command tx timeout [ 60.559551][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.559564][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.559581][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.565039][ T5598] team0: Port device team_slave_1 added [ 60.610566][ T5602] hsr_slave_0: entered promiscuous mode [ 60.611245][ T5602] hsr_slave_1: entered promiscuous mode [ 60.611756][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 60.611816][ T5602] Cannot create hsr debugfs directory [ 60.644045][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.644060][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.644080][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.651032][ T5610] hsr_slave_0: entered promiscuous mode [ 60.651814][ T5610] hsr_slave_1: entered promiscuous mode [ 60.652273][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 60.652287][ T5610] Cannot create hsr debugfs directory [ 60.673585][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.673600][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.673618][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.722586][ T5599] hsr_slave_0: entered promiscuous mode [ 60.723753][ T5599] hsr_slave_1: entered promiscuous mode [ 60.724273][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 60.724287][ T5599] Cannot create hsr debugfs directory [ 60.813050][ T5598] hsr_slave_0: entered promiscuous mode [ 60.813477][ T5598] hsr_slave_1: entered promiscuous mode [ 60.813775][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 60.813790][ T5598] Cannot create hsr debugfs directory [ 60.929071][ T5604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.933047][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.967222][ T5604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.969503][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.005109][ T5604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.008511][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.009350][ T5604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.023991][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.142710][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.156235][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.156770][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.173782][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.174791][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.192003][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.192637][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.195536][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.273294][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.279657][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.280220][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.295157][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.304442][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.315401][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.315778][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.319252][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.343954][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.399186][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.419984][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.420058][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.429358][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.451495][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.452024][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.454400][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.474659][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.482494][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.483077][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.490935][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.494938][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.495011][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.542976][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.591370][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.629480][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.631748][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.633803][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.634957][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.635003][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.665737][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.681427][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.683431][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.683555][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.690325][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.714448][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.715192][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.726169][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.734317][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 61.734329][ T31] audit: type=1400 audit(1790375795.036:152): avc: denied { sys_module } for pid=5604 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.832618][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.857131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.857209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.871297][ T5602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.909955][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.910038][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.995357][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.063175][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.079747][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.122178][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.122263][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.144502][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.144592][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.156355][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.224849][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.263951][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.264037][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.290393][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.290462][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.329603][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.441049][ T5611] Bluetooth: hci0: command tx timeout [ 62.441079][ T5611] Bluetooth: hci3: command tx timeout [ 62.441097][ T5611] Bluetooth: hci1: command tx timeout [ 62.518263][ T5613] Bluetooth: hci2: command tx timeout [ 62.518292][ T5613] Bluetooth: hci4: command tx timeout [ 62.606288][ T5604] veth0_vlan: entered promiscuous mode [ 62.636329][ T5604] veth1_vlan: entered promiscuous mode [ 62.733367][ T5604] veth0_macvtap: entered promiscuous mode [ 62.744256][ T5604] veth1_macvtap: entered promiscuous mode [ 62.754889][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.814570][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.860318][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.892260][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.943730][ T5602] veth0_vlan: entered promiscuous mode [ 62.987158][ T5602] veth1_vlan: entered promiscuous mode [ 63.007168][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.039176][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.080274][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.113422][ T5602] veth0_macvtap: entered promiscuous mode [ 63.117676][ T1497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.117694][ T1497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.143186][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.144370][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.154074][ T5610] veth0_vlan: entered promiscuous mode [ 63.165583][ T5602] veth1_macvtap: entered promiscuous mode [ 63.194358][ T5610] veth1_vlan: entered promiscuous mode [ 63.219830][ T1497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.219860][ T1497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.239970][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.249569][ T31] audit: type=1400 audit(1790375796.556:153): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.xmCtEb/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.256187][ T31] audit: type=1400 audit(1790375796.556:154): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.262832][ T31] audit: type=1400 audit(1790375796.566:155): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.xmCtEb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.266156][ T31] audit: type=1400 audit(1790375796.566:156): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.266629][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.284640][ T31] audit: type=1400 audit(1790375796.586:157): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.xmCtEb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.289541][ T31] audit: type=1400 audit(1790375796.596:158): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.xmCtEb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.304555][ T31] audit: type=1400 audit(1790375796.606:159): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.336533][ T31] audit: type=1400 audit(1790375796.636:160): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.353519][ T31] audit: type=1400 audit(1790375796.656:161): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="gadgetfs" ino=7624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.365672][ T5610] veth0_macvtap: entered promiscuous mode [ 63.367035][ T5599] veth0_vlan: entered promiscuous mode [ 63.369264][ T145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.369963][ T145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.429121][ T5610] veth1_macvtap: entered promiscuous mode [ 63.460764][ T172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.467813][ T5599] veth1_vlan: entered promiscuous mode [ 63.496524][ T5604] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.515931][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.533380][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.601984][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.633515][ T1541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.633534][ T1541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.641106][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.673096][ T5781] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3'. [ 63.739470][ T5784] capability: warning: `syz.2.6' uses 32-bit capabilities (legacy support in use) [ 63.743636][ T5784] program syz.2.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.765829][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.765853][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.803225][ T5599] veth0_macvtap: entered promiscuous mode [ 63.841061][ T1497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.843593][ T5599] veth1_macvtap: entered promiscuous mode [ 63.881574][ T1497] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.881803][ T1497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.882005][ T1497] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.960363][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.960382][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.989219][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.024419][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.078325][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.079566][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.079603][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.079634][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.159719][ T5793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.170998][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.171016][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.302361][ T5598] veth0_vlan: entered promiscuous mode [ 64.316061][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.316078][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.328268][ T5799] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 64.334028][ T5598] veth1_vlan: entered promiscuous mode [ 64.473868][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.473889][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.537223][ T5611] Bluetooth: hci1: command tx timeout [ 64.537256][ T5611] Bluetooth: hci3: command tx timeout [ 64.537277][ T5611] Bluetooth: hci0: command tx timeout [ 64.597135][ T5611] Bluetooth: hci4: command tx timeout [ 64.597167][ T5611] Bluetooth: hci2: command tx timeout [ 64.977121][ T5598] veth0_macvtap: entered promiscuous mode [ 65.075899][ T5598] veth1_macvtap: entered promiscuous mode [ 65.139321][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.181749][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.673224][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.673242][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.719974][ T5706] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.770208][ T1497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.770227][ T1497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.801068][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.801104][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.808678][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.808923][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.809559][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.809771][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.839028][ T5831] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 65.869208][ T5831] syz_tun: entered promiscuous mode [ 65.911905][ T5831] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 65.946015][ T5706] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.964989][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.965021][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.965040][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.965073][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.966299][ T5831] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 65.966325][ T5831] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 65.966349][ T5831] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 65.988779][ T5831] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.070793][ T5706] usb 4-1: config 0 descriptor?? [ 66.072113][ T5831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.484882][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 66.484915][ T5846] netlink: 68 bytes leftover after parsing attributes in process `syz.1.24'. [ 66.507161][ T5846] Zero length message leads to an empty skb [ 66.559264][ T5706] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 66.598641][ T5613] Bluetooth: hci0: command tx timeout [ 66.598673][ T5613] Bluetooth: hci3: command tx timeout [ 66.598691][ T5613] Bluetooth: hci1: command tx timeout [ 66.678800][ T5613] Bluetooth: hci4: command tx timeout [ 66.678844][ T5611] Bluetooth: hci2: command tx timeout [ 67.675932][ T31] kauditd_printk_skb: 51 callbacks suppressed [ 67.675950][ T31] audit: type=1400 audit(1790375800.976:213): avc: denied { ioctl } for pid=5871 comm="syz.1.33" path="mnt:[4026532788]" dev="nsfs" ino=4026532788 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.931693][ T5886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.40'. [ 68.056446][ T5889] netlink: 64 bytes leftover after parsing attributes in process `syz.1.41'. [ 68.057753][ T31] audit: type=1400 audit(1790375801.356:214): avc: denied { write } for pid=5888 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.057792][ T31] audit: type=1400 audit(1790375801.356:215): avc: denied { nlmsg_write } for pid=5888 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.139456][ T5890] ======================================================= [ 68.139456][ T5890] WARNING: The mand mount option has been deprecated and [ 68.139456][ T5890] and is ignored by this kernel. Remove the mand [ 68.139456][ T5890] option from the mount to silence this warning. [ 68.139456][ T5890] ======================================================= [ 68.205591][ T31] audit: type=1400 audit(1790375801.456:216): avc: denied { create } for pid=5883 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.205760][ T31] audit: type=1400 audit(1790375801.456:217): avc: denied { connect } for pid=5883 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.206285][ T31] audit: type=1400 audit(1790375801.466:218): avc: denied { mount } for pid=5883 comm="syz.4.38" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 68.206407][ T31] audit: type=1400 audit(1790375801.466:219): avc: denied { write } for pid=5883 comm="syz.4.38" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.657241][ T5714] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.788273][ T31] audit: type=1400 audit(1790375802.096:220): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 68.796409][ T5706] usb 4-1: USB disconnect, device number 2 [ 68.831558][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 68.835140][ T5714] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 68.858998][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.859016][ T5714] usb 3-1: Product: syz [ 68.859024][ T5714] usb 3-1: Manufacturer: syz [ 68.859032][ T5714] usb 3-1: SerialNumber: syz [ 68.885984][ T5913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.52'. [ 68.917503][ T5714] usb 3-1: config 0 descriptor?? [ 69.025674][ T5600] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.677535][ T5600] usb 2-1: Using ep0 maxpacket: 8 [ 69.678150][ T5600] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.678973][ T5600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.679009][ T5600] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.679030][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.691415][ T5600] usb 2-1: config 0 descriptor?? [ 69.707039][ T5600] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 69.887828][ T5924] netlink: 108 bytes leftover after parsing attributes in process `syz.3.55'. [ 70.099400][ T5714] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 70.160316][ T31] audit: type=1400 audit(1790375803.466:221): avc: denied { create } for pid=5929 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.174711][ T31] audit: type=1400 audit(1790375803.466:222): avc: denied { name_bind } for pid=5922 comm="syz.4.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 70.221135][ T5714] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 70.244774][ T5714] usb 3-1: USB disconnect, device number 2 [ 70.407081][ T5605] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.556878][ T5605] usb 4-1: Using ep0 maxpacket: 16 [ 70.557639][ T5605] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.558737][ T5605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.558761][ T5605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.558782][ T5605] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.558817][ T5605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.570734][ T5605] usb 4-1: config 0 descriptor?? [ 71.057174][ T5943] syzkaller0: entered promiscuous mode [ 71.057202][ T5943] syzkaller0: entered allmulticast mode [ 71.182301][ T5605] usbhid 4-1:0.0: can't add hid device: -71 [ 71.182385][ T5605] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 71.201609][ T5605] usb 4-1: USB disconnect, device number 3 [ 71.279872][ T5945] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.733587][ T30] usb 2-1: USB disconnect, device number 2 [ 72.688635][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 72.688653][ T31] audit: type=1400 audit(1790375805.996:230): avc: denied { append } for pid=5962 comm="syz.1.68" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.735376][ T31] audit: type=1400 audit(1790375806.036:231): avc: denied { read } for pid=5962 comm="syz.1.68" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.735703][ T31] audit: type=1400 audit(1790375806.036:232): avc: denied { open } for pid=5962 comm="syz.1.68" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.839216][ T31] audit: type=1400 audit(1790375806.136:233): avc: denied { ioctl } for pid=5962 comm="syz.1.68" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.912417][ T31] audit: type=1400 audit(1790375806.216:234): avc: denied { mmap_zero } for pid=5967 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 73.002344][ T5973] syzkaller0: entered promiscuous mode [ 73.002366][ T5973] syzkaller0: entered allmulticast mode [ 73.273901][ T31] audit: type=1400 audit(1790375806.576:235): avc: denied { setopt } for pid=5978 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.273944][ T31] audit: type=1400 audit(1790375806.576:236): avc: denied { bind } for pid=5978 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.273978][ T31] audit: type=1400 audit(1790375806.576:237): avc: denied { name_bind } for pid=5978 comm="syz.4.75" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.274012][ T31] audit: type=1400 audit(1790375806.576:238): avc: denied { node_bind } for pid=5978 comm="syz.4.75" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 73.320407][ T31] audit: type=1400 audit(1790375806.616:239): avc: denied { map } for pid=5980 comm="syz.1.76" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.074391][ T10] cfg80211: failed to load regulatory.db [ 76.368698][ T6013] xt_hashlimit: size too large, truncated to 1048576 [ 76.368766][ T6013] xt_hashlimit: max too large, truncated to 1048576 [ 76.489481][ T6015] syzkaller0: entered promiscuous mode [ 76.489504][ T6015] syzkaller0: entered allmulticast mode [ 77.756450][ T6028] CIFS: Attempting to mount //127.0.0.1/share [ 77.845318][ T6029] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 77.859125][ T6028] CIFS: VFS: cifs_mount failed w/return code = -112 [ 78.244825][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 78.244841][ T31] audit: type=1400 audit(1790375811.546:249): avc: denied { create } for pid=6040 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.279760][ T31] audit: type=1400 audit(1790375811.586:250): avc: denied { connect } for pid=6040 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.288743][ T31] audit: type=1400 audit(1790375811.586:251): avc: denied { read } for pid=6040 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.445976][ T31] audit: type=1400 audit(1790375811.726:252): avc: denied { write } for pid=6040 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.586145][ T31] audit: type=1400 audit(1790375812.886:253): avc: denied { map } for pid=6059 comm="syz.3.106" path="socket:[9689]" dev="sockfs" ino=9689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 79.685872][ T6065] CIFS: Attempting to mount //127.0.0.1/share [ 79.748280][ T6068] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 79.764988][ T6065] CIFS: VFS: cifs_mount failed w/return code = -112 [ 80.163395][ T6083] xt_hashlimit: size too large, truncated to 1048576 [ 80.165649][ T6083] xt_hashlimit: max too large, truncated to 1048576 [ 81.900549][ T6106] binder: 6105:6106 ioctl 400c620e 200000000240 returned -22 [ 81.901858][ T31] audit: type=1400 audit(1790375815.196:254): avc: denied { read } for pid=6105 comm="syz.0.119" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.901901][ T31] audit: type=1400 audit(1790375815.196:255): avc: denied { open } for pid=6105 comm="syz.0.119" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.901938][ T31] audit: type=1400 audit(1790375815.206:256): avc: denied { ioctl } for pid=6105 comm="syz.0.119" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.027836][ T6106] syzkaller0: entered promiscuous mode [ 82.027860][ T6106] syzkaller0: entered allmulticast mode [ 82.045795][ T31] audit: type=1400 audit(1790375815.346:257): avc: denied { write } for pid=6105 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.091801][ T31] audit: type=1400 audit(1790375815.396:258): avc: denied { bind } for pid=6109 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.286931][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.398146][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.437069][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 82.439276][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.439316][ T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 82.440150][ T10] usb 1-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 82.440173][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.440215][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.440238][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 82.441910][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.441931][ T10] usb 1-1: Product: syz [ 82.441945][ T10] usb 1-1: Manufacturer: syz [ 82.441959][ T10] usb 1-1: SerialNumber: syz [ 82.593335][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.593378][ T25] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 82.613809][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.613832][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.642546][ T25] usb 5-1: string descriptor 0 read error: -22 [ 82.642651][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.669371][ T25] usb 5-1: selecting invalid altsetting 1 [ 82.671158][ T25] usb 5-1: unit 6 not found! [ 82.722506][ T6106] xfrm0: entered promiscuous mode [ 82.722528][ T6106] xfrm0: entered allmulticast mode [ 83.575495][ T25] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 83.915279][ T25] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 83.919139][ T10] usb 1-1: 0:2 : does not exist [ 83.935755][ T25] usb 5-1: USB disconnect, device number 2 [ 83.969357][ T10] usb 1-1: unknown interface protocol 0x6b, assuming v1 [ 83.969380][ T10] usb 1-1: cannot find UAC_HEADER [ 84.097922][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 84.111141][ T10] usb 1-1: USB disconnect, device number 2 [ 84.214012][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 84.214029][ T31] audit: type=1400 audit(1790375817.516:260): avc: denied { create } for pid=6145 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.215547][ T31] audit: type=1400 audit(1790375817.516:261): avc: denied { write } for pid=6145 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.278574][ T5592] udevd[5592]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.601374][ T25] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 84.662756][ T6161] binder: 6159:6161 ioctl 400c620e 200000000240 returned -22 [ 84.716175][ T6161] syzkaller0: entered promiscuous mode [ 84.716195][ T6161] syzkaller0: entered allmulticast mode [ 84.759541][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 84.759571][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 84.760436][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.760485][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.787529][ T25] uvcvideo 5-1:1.1: Unknown video format 32595559-0000-0010-8000-00aa00389b00 [ 84.787594][ T25] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 84.787637][ T25] uvcvideo 5-1:1.1: No supported video formats found. [ 84.787650][ T25] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 84.798345][ T25] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -22 [ 84.882871][ T6164] xt_hashlimit: size too large, truncated to 1048576 [ 84.882889][ T6164] xt_hashlimit: max too large, truncated to 1048576 [ 84.976880][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.127621][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 85.134798][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.134848][ T30] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 85.138567][ T30] usb 2-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 85.138586][ T30] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.138623][ T30] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.138644][ T30] usb 2-1: config 1 interface 1 has no altsetting 0 [ 85.144232][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.144251][ T30] usb 2-1: Product: syz [ 85.144263][ T30] usb 2-1: Manufacturer: syz [ 85.144275][ T30] usb 2-1: SerialNumber: syz [ 85.541200][ T6161] xfrm0: entered promiscuous mode [ 85.541221][ T6161] xfrm0: entered allmulticast mode [ 85.629398][ T30] usb 2-1: 0:2 : does not exist [ 85.661640][ T30] usb 2-1: unknown interface protocol 0x6b, assuming v1 [ 85.661663][ T30] usb 2-1: cannot find UAC_HEADER [ 85.958248][ T30] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 85.969930][ T30] usb 2-1: USB disconnect, device number 3 [ 86.355243][ T5592] udevd[5592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.000519][ T31] audit: type=1400 audit(1790375820.306:262): avc: denied { create } for pid=6205 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.030773][ T31] audit: type=1400 audit(1790375820.336:263): avc: denied { bind } for pid=6204 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.031143][ T31] audit: type=1400 audit(1790375820.336:264): avc: denied { setopt } for pid=6204 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.032244][ T31] audit: type=1400 audit(1790375820.336:265): avc: denied { listen } for pid=6204 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.032282][ T31] audit: type=1400 audit(1790375820.336:266): avc: denied { connect } for pid=6205 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.048625][ T31] audit: type=1400 audit(1790375820.356:267): avc: denied { write } for pid=6205 comm="syz.1.149" path="socket:[9926]" dev="sockfs" ino=9926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.092030][ T31] audit: type=1400 audit(1790375820.396:268): avc: denied { accept } for pid=6204 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.092332][ T31] audit: type=1400 audit(1790375820.396:269): avc: denied { read } for pid=6204 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.428070][ T5600] usb 5-1: USB disconnect, device number 3 [ 87.577900][ T6221] binder: 6220:6221 ioctl 400c620e 200000000240 returned -22 [ 87.615117][ T6221] syzkaller0: entered promiscuous mode [ 87.615137][ T6221] syzkaller0: entered allmulticast mode [ 88.378060][ T5600] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.658085][ T6231] xt_hashlimit: size too large, truncated to 1048576 [ 88.658107][ T6231] xt_hashlimit: max too large, truncated to 1048576 [ 88.756913][ T5600] usb 5-1: Using ep0 maxpacket: 8 [ 88.758938][ T5600] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.758976][ T5600] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 88.759822][ T5600] usb 5-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 88.759843][ T5600] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 88.759887][ T5600] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.759956][ T5600] usb 5-1: config 1 interface 1 has no altsetting 0 [ 88.766021][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.766045][ T5600] usb 5-1: Product: syz [ 88.766059][ T5600] usb 5-1: Manufacturer: syz [ 88.766074][ T5600] usb 5-1: SerialNumber: syz [ 89.214905][ T6221] xfrm0: entered promiscuous mode [ 89.214928][ T6221] xfrm0: entered allmulticast mode [ 89.277946][ T5600] usb 5-1: 0:2 : does not exist [ 89.306653][ T5600] usb 5-1: unknown interface protocol 0x6b, assuming v1 [ 89.306676][ T5600] usb 5-1: cannot find UAC_HEADER [ 89.383211][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 89.383228][ T31] audit: type=1400 audit(1790375822.686:279): avc: denied { read } for pid=6237 comm="syz.3.159" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.383265][ T31] audit: type=1400 audit(1790375822.686:280): avc: denied { open } for pid=6237 comm="syz.3.159" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.495279][ T5600] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 89.513509][ T5600] usb 5-1: USB disconnect, device number 4 [ 89.633997][ T5592] udevd[5592]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.116799][ T6249] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 91.746289][ T6276] fuse: Unknown parameter 'user_i00000000000000000000' [ 91.806936][ T5600] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.960046][ T5600] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 91.964845][ T5600] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.964874][ T5600] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.964899][ T5600] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.964935][ T5600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.026904][ T6274] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.285145][ T5600] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 97.456843][ C1] sched: DL replenish lagged too much [ 134.092837][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.106311][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 183.520968][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 183.521027][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 183.521051][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 183.521072][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 183.521102][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 189.093946][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.103563][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.706887][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.718744][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.094887][ T32] INFO: task kworker/0:4:5605 blocked for more than 145 seconds. [ 263.094911][ T32] Not tainted syzkaller #0 [ 263.094921][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.094928][ T32] task:kworker/0:4 state:D stack:23912 pid:5605 tgid:5605 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 263.094986][ T32] Workqueue: events_power_efficient crda_timeout_work [ 263.095016][ T32] Call Trace: [ 263.095021][ T32] [ 263.095032][ T32] __schedule+0x1259/0x6920 [ 263.095061][ T32] ? lock_acquire+0x1d1/0x380 [ 263.095089][ T32] ? mark_held_locks+0x40/0x70 [ 263.095108][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.095134][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 263.095164][ T32] ? __pfx___schedule+0x10/0x10 [ 263.095188][ T32] ? find_held_lock+0x2b/0x80 [ 263.095215][ T32] ? schedule+0x225/0x2c0 [ 263.095244][ T32] schedule+0xdd/0x2c0 [ 263.095270][ T32] schedule_preempt_disabled+0x13/0x30 [ 263.095296][ T32] __mutex_lock+0xccb/0x1bd0 [ 263.095314][ T32] ? crda_timeout_work+0x16/0x70 [ 263.095339][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 263.095362][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 263.095387][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 263.095419][ T32] ? process_one_work+0xa2c/0x1b10 [ 263.095450][ T32] ? process_one_work+0x906/0x1b10 [ 263.095481][ T32] ? crda_timeout_work+0x16/0x70 [ 263.095504][ T32] crda_timeout_work+0x16/0x70 [ 263.095528][ T32] process_one_work+0xac7/0x1b10 [ 263.095567][ T32] ? __pfx_process_one_work+0x10/0x10 [ 263.095601][ T32] ? lock_acquire+0x1d1/0x380 [ 263.095628][ T32] ? __pfx_crda_timeout_work+0x10/0x10 [ 263.095656][ T32] worker_thread+0x5ef/0xe50 [ 263.095691][ T32] ? __pfx_worker_thread+0x10/0x10 [ 263.095720][ T32] ? kthread+0x13a/0x450 [ 263.095744][ T32] ? __pfx_worker_thread+0x10/0x10 [ 263.095770][ T32] kthread+0x373/0x450 [ 263.095794][ T32] ? __pfx_kthread+0x10/0x10 [ 263.095821][ T32] ret_from_fork+0x730/0xd60 [ 263.095844][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 263.095867][ T32] ? __switch_to+0x800/0x10f0 [ 263.095892][ T32] ? __pfx_kthread+0x10/0x10 [ 263.095918][ T32] ret_from_fork_asm+0x1a/0x30 [ 263.095954][ T32] [ 263.095978][ T32] INFO: task kworker/0:6:5714 blocked for more than 145 seconds. [ 263.095990][ T32] Not tainted syzkaller #0 [ 263.095999][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.096006][ T32] task:kworker/0:6 state:D stack:22968 pid:5714 tgid:5714 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 263.096059][ T32] Workqueue: events reg_todo [ 263.096080][ T32] Call Trace: [ 263.096085][ T32] [ 263.096095][ T32] __schedule+0x1259/0x6920 [ 263.096121][ T32] ? lock_acquire+0x1d1/0x380 [ 263.096146][ T32] ? mark_held_locks+0x40/0x70 [ 263.096166][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.096190][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 263.096220][ T32] ? __pfx___schedule+0x10/0x10 [ 263.096243][ T32] ? find_held_lock+0x2b/0x80 [ 263.096269][ T32] ? schedule+0x225/0x2c0 [ 263.096298][ T32] schedule+0xdd/0x2c0 [ 263.096323][ T32] schedule_preempt_disabled+0x13/0x30 [ 263.096348][ T32] __mutex_lock+0xccb/0x1bd0 [ 263.096373][ T32] ? reg_process_self_managed_hints+0x95/0x180 [ 263.096403][ T32] ? find_held_lock+0x2b/0x80 [ 263.096428][ T32] ? reg_process_self_managed_hints+0xa5/0x180 [ 263.096455][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 263.096474][ T32] ? __mutex_unlock_slowpath+0x35d/0x930 [ 263.096492][ T32] ? __pfx_reg_process_self_managed_hint+0x10/0x10 [ 263.096527][ T32] ? preempt_schedule_common+0x3c/0xb0 [ 263.096559][ T32] ? reg_process_self_managed_hints+0x95/0x180 [ 263.096583][ T32] reg_process_self_managed_hints+0x95/0x180 [ 263.096609][ T32] reg_todo+0x5cf/0x800 [ 263.096632][ T32] ? process_one_work+0x906/0x1b10 [ 263.096659][ T32] ? process_one_work+0x906/0x1b10 [ 263.096691][ T32] process_one_work+0xac7/0x1b10 [ 263.096730][ T32] ? __pfx_process_one_work+0x10/0x10 [ 263.103286][ T32] ? lock_acquire+0x1d1/0x380 [ 263.103321][ T32] ? __pfx_reg_todo+0x10/0x10 [ 263.103348][ T32] worker_thread+0x5ef/0xe50 [ 263.103388][ T32] ? __pfx_worker_thread+0x10/0x10 [ 263.103418][ T32] ? kthread+0x13a/0x450 [ 263.103441][ T32] ? __pfx_worker_thread+0x10/0x10 [ 263.103467][ T32] kthread+0x373/0x450 [ 263.103492][ T32] ? __pfx_kthread+0x10/0x10 [ 263.103518][ T32] ret_from_fork+0x730/0xd60 [ 263.103541][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 263.103563][ T32] ? __switch_to+0x800/0x10f0 [ 263.103589][ T32] ? __pfx_kthread+0x10/0x10 [ 263.103616][ T32] ret_from_fork_asm+0x1a/0x30 [ 263.103650][ T32] [ 263.103670][ T32] [ 263.103670][ T32] Showing all locks held in the system: [ 263.103676][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 263.103689][ T32] #0: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.103739][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#0: [ 263.103751][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 263.103801][ T32] locks held by kworker/0:0/9: 1, on CPU#0: [ 263.103813][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 263.103862][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 263.103874][ T32] #0: ffff88805b651140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.103929][ T32] #1: ffffc900000f7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.104003][ T32] #2: ffff88805a0d5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 263.104056][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 263.104068][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.104123][ T32] #1: ffffc90000117d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.104173][ T32] #2: ffff888058ca0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.104217][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 263.104228][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.104278][ T32] #1: ffffc90000127d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.104329][ T32] #2: ffff888057640800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.104372][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 263.104400][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 263.104450][ T32] locks held by kworker/1:0/25: 3, last CPU#1: [ 263.104462][ T32] #0: ffff88805b28f140 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.104517][ T32] #1: ffffc900001f7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.104585][ T32] #2: ffff88807f093ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 263.104636][ T32] locks held by kworker/1:1/30: 4, last CPU#1: [ 263.104649][ T32] #0: ffff8880341be140 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.104704][ T32] #1: ffffc90000a57d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.104772][ T32] #2: ffff888077c29440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 263.104823][ T32] #3: ffff88807f097028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 263.104873][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 263.104884][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 263.104935][ T32] locks held by kworker/u8:2/43: 4, on CPU#0: [ 263.104946][ T32] #0: ffff88801eba2940 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.105000][ T32] #1: ffffc90000b37d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.105052][ T32] #2: ffff888021ecd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 263.105103][ T32] #3: ffff88807f093ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 263.105154][ T32] locks held by kworker/u8:3/50: 3, last CPU#0: [ 263.105166][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.105215][ T32] #1: ffffc90000ba7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.105266][ T32] #2: ffff8880574f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.105310][ T32] locks held by kworker/u9:0/52: 7, on CPU#0: [ 263.105322][ T32] #0: ffff88807a776140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.105373][ T32] #1: ffffc90000bc7d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.105429][ T32] #2: ffff88805fb3cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 263.105471][ T32] #3: ffff88805fb3c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 263.105514][ T32] #4: ffffffff90f56e40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 263.105563][ T32] #5: ffff88807a018af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0xa1/0x6c0 [ 263.105610][ T32] #6: ffffffff8edf83e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 263.105652][ T32] locks held by kworker/1:2/56: 3, last CPU#1: [ 263.105664][ T32] #0: ffff88805b01c540 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.105718][ T32] #1: ffffc9000100fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.105786][ T32] #2: ffff88805a0d7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 263.105837][ T32] locks held by kworker/u8:4/60: 3, last CPU#0: [ 263.105850][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.105900][ T32] #1: ffffc9000202fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.105950][ T32] #2: ffff888058fc0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.105994][ T32] locks held by kworker/R-ksmbd/113: 1, on CPU#1: [ 263.106007][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 263.106057][ T32] locks held by kworker/u8:5/145: 4, last CPU#0: [ 263.106070][ T32] #0: ffff88807d058940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.106124][ T32] #1: ffffc9000205fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.106175][ T32] #2: ffff888077c2d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 263.106225][ T32] #3: ffff888037d10d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 263.106275][ T32] locks held by kworker/u8:6/151: 3, last CPU#0: [ 263.106287][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.106338][ T32] #1: ffffc90002ebfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.106392][ T32] #2: ffff888058960800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.106435][ T32] locks held by kworker/u8:7/166: 3, last CPU#0: [ 263.106447][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.106497][ T32] #1: ffffc90002f0fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.106547][ T32] #2: ffff888059300800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.106590][ T32] locks held by kworker/u8:8/172: 4, on CPU#1: [ 263.106602][ T32] #0: ffff88807de32140 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.106655][ T32] #1: ffffc90002f8fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.106706][ T32] #2: ffff8880223dd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 263.119960][ T32] #3: ffff88807f094888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 263.120025][ T32] locks held by kworker/u8:9/179: 2, last CPU#0: [ 263.120038][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.120091][ T32] #1: ffffc90002defd08 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.120142][ T32] locks held by kworker/u8:10/192: 3, last CPU#0: [ 263.120154][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.120205][ T32] #1: ffffc9000308fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.120255][ T32] #2: ffff8880581d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.120303][ T32] locks held by kworker/1:3/990: 4, last CPU#1: [ 263.120315][ T32] #0: ffff88805ad1d140 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.120370][ T32] #1: ffffc90004fd7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.120443][ T32] #2: ffff8880223dd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 263.120494][ T32] #3: ffff88807f094888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 263.120547][ T32] locks held by kworker/u8:11/1497: 3, last CPU#0: [ 263.120559][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.120609][ T32] #1: ffffc90005d77d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.120659][ T32] #2: ffff888058610800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.120702][ T32] locks held by kworker/u8:12/1541: 3, last CPU#0: [ 263.120714][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.120764][ T32] #1: ffffc90005e47d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.120814][ T32] #2: ffff888058040800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.120868][ T32] locks held by kworker/R-ipv6_/3193: 3, on CPU#1: [ 263.120881][ T32] #0: ffff888033e59940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.120931][ T32] #1: ffffc9000d29fc68 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.120983][ T32] #2: ffffffff90cd49c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 263.121030][ T32] locks held by kworker/R-bat_e/3224: 4, last CPU#1: [ 263.121042][ T32] #0: ffff8880335c3940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.121092][ T32] #1: ffffc9000f54fc68 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.121143][ T32] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x437/0x1600 [ 263.121187][ T32] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: nf_hook.constprop.0+0x98/0x750 [ 263.121231][ T32] locks held by kworker/0:2/3733: 4, last CPU#0: [ 263.121244][ T32] #0: ffff88805b220540 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.121298][ T32] #1: ffffc9000f5bfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.121367][ T32] #2: ffff888024395440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 263.121424][ T32] #3: ffff888037d14888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x666/0x860 [ 263.121477][ T32] locks held by klogd/4960: 1, last CPU#0: [ 263.121489][ T32] #0: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.121534][ T32] locks held by udevd/4971: 2, last CPU#0: [ 263.121546][ T32] #0: ffffffff8f90ae78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x169/0x3c0 [ 263.121590][ T32] #1: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.121634][ T32] locks held by dhcpcd/5266: 5, last CPU#0: [ 263.121647][ T32] #0: ffffffff8ef3deb0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4806/0x8370 [ 263.121691][ T32] #1: ffff88807da7b6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 263.121737][ T32] #2: ffff88801c079078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 263.121788][ T32] #3: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.121833][ T32] #4: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 263.121882][ T32] locks held by getty/5359: 2, on CPU#0: [ 263.121894][ T32] #0: ffff88801da990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 263.121937][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 263.121990][ T32] locks held by syz-executor/5598: 2, last CPU#0: [ 263.122003][ T32] #0: ffffffff8f90ae78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 263.122046][ T32] #1: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.122089][ T32] locks held by syz-executor/5599: 4, last CPU#0: [ 263.122101][ T32] #0: ffff888029ce8460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 263.122153][ T32] #1: ffff888058b9dd00 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 [ 263.122209][ T32] #2: ffffffff8f90ae78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 263.122250][ T32] #3: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.122293][ T32] locks held by kworker/0:3/5600: 6, last CPU#0: [ 263.122306][ T32] #0: ffff8880232a9540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.122356][ T32] #1: ffffc9000437fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.122412][ T32] #2: ffff88802aaa21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 263.122462][ T32] #3: ffff8880595151d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 263.122507][ T32] #4: ffff88802a73d1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 263.122552][ T32] #5: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.122596][ T32] locks held by kworker/u9:2/5601: 5, on CPU#1: [ 263.122607][ T32] #0: ffff88807a019140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.122657][ T32] #1: ffffc9000438fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.122708][ T32] #2: ffff888075894ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 263.122750][ T32] #3: ffff8880758940b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 263.122792][ T32] #4: ffffffff90f56e40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 263.122843][ T32] locks held by syz-executor/5602: 2, last CPU#0: [ 263.122855][ T32] #0: ffff8880338962e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x5a/0x520 [ 263.122904][ T32] #1: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.122953][ T32] locks held by kworker/0:4/5605: 3, on CPU#0: [ 263.122965][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.123016][ T32] #1: ffffc900043afd08 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.123066][ T32] #2: ffffffff90cd49c0 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x70 [ 263.123114][ T32] locks held by syz-executor/5610: 2, last CPU#0: [ 263.123126][ T32] #0: ffffffff8f90ae78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 263.123167][ T32] #1: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.123212][ T32] locks held by kworker/u9:5/5613: 5, on CPU#1: [ 263.123224][ T32] #0: ffff88807a770940 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.123274][ T32] #1: ffffc9000442fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.123326][ T32] #2: ffff88805fb24ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 263.123367][ T32] #3: ffff88805fb240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 263.123417][ T32] #4: ffffffff90f56e40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 263.123470][ T32] locks held by kworker/R-wg-cr/5675: 1, last CPU#1: [ 263.123482][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 263.123531][ T32] locks held by kworker/R-wg-cr/5677: 1, on CPU#1: [ 263.123543][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 263.123598][ T32] locks held by kworker/R-wg-cr/5679: 1, on CPU#1: [ 263.123610][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 263.123660][ T32] locks held by kworker/R-wg-cr/5682: 1, on CPU#0: [ 263.123672][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 263.123722][ T32] locks held by kworker/R-wg-cr/5683: 1, on CPU#0: [ 263.123734][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 263.123784][ T32] locks held by kworker/R-wg-cr/5685: 1, on CPU#1: [ 263.123797][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 263.123846][ T32] locks held by kworker/R-wg-cr/5686: 1, on CPU#0: [ 263.123858][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 263.123905][ T32] locks held by kworker/R-wg-cr/5687: 1, on CPU#0: [ 263.123918][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 263.123967][ T32] locks held by kworker/R-wg-cr/5689: 1, on CPU#0: [ 263.123979][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 263.124029][ T32] locks held by kworker/R-wg-cr/5690: 1, on CPU#1: [ 263.124042][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 263.124093][ T32] locks held by kworker/R-wg-cr/5691: 1, on CPU#1: [ 263.124105][ T32] #0: ffffffff8ec92fa0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbb1/0x14e0 [ 263.124157][ T32] locks held by kworker/1:4/5705: 4, last CPU#1: [ 263.124169][ T32] #0: ffff88805b644940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.124224][ T32] #1: ffffc9000203fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.124292][ T32] #2: ffff88802bfd5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 263.124342][ T32] #3: ffff888037d17028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 263.124397][ T32] locks held by kworker/1:5/5706: 4, last CPU#1: [ 263.124409][ T32] #0: ffff88805b651140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.124464][ T32] #1: ffffc9000469fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.124531][ T32] #2: ffff88802bfd1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 263.124582][ T32] #3: ffff88805a0d5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x666/0x860 [ 263.124634][ T32] locks held by kworker/0:5/5713: 3, on CPU#0: [ 263.124646][ T32] #0: ffff8880341be140 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.124701][ T32] #1: ffffc9000470fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.124769][ T32] #2: ffff88807f097028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 263.124820][ T32] locks held by kworker/0:6/5714: 4, on CPU#0: [ 263.124832][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.124882][ T32] #1: ffffc9000471fd08 (reg_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.124932][ T32] #2: ffffffff90cd49c0 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x800 [ 263.124975][ T32] #3: ffff8880574f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x95/0x180 [ 263.125024][ T32] locks held by kworker/1:6/5732: 2, last CPU#1: [ 263.125037][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.125088][ T32] #1: ffffc900048b7d08 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.125139][ T32] locks held by kworker/1:7/5797: 3, on CPU#1: [ 263.125151][ T32] #0: ffff88805b220540 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.125206][ T32] #1: ffffc900048dfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.125275][ T32] #2: ffff888037d14888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 263.125325][ T32] locks held by kworker/u8:13/6095: 3, last CPU#0: [ 263.125338][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.125393][ T32] #1: ffffc90006b17d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.125445][ T32] #2: ffff888058410800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 263.125489][ T32] locks held by syz.2.167/6258: 1, last CPU#0: [ 263.125501][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 263.125548][ T32] locks held by kworker/u8:14/6283: 4, last CPU#0: [ 263.125561][ T32] #0: ffff88802b084940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.125611][ T32] #1: ffffc90002dbfd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.125663][ T32] #2: ffff88802bfd1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 263.125715][ T32] #3: ffff88805a0d4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 263.125766][ T32] locks held by kworker/u8:15/6284: 4, last CPU#0: [ 263.125779][ T32] #0: ffff88807d058940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.125834][ T32] #1: ffffc9000e9cfd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.125886][ T32] #2: ffff888077c2d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 263.125937][ T32] #3: ffff888037d11700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 263.125989][ T32] locks held by kworker/u8:16/6285: 3, last CPU#0: [ 263.126002][ T32] #0: ffff88801c092940 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.126054][ T32] #1: ffffc900044afd08 ((work_completion)(&(&krcp->monitor_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.126107][ T32] #2: ffffffff8edec3c0 (rcu_callback){....}-{0:0}, at: kvfree_rcu_bulk+0x6a/0x190 [ 263.126155][ T32] locks held by syz-executor/6286: 3, last CPU#0: [ 263.126167][ T32] #0: ffff8880317e79e0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xa3/0x1940 [ 263.126210][ T32] #1: ffffffff8f90ae78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0x11f/0x1d0 [ 263.126260][ T32] #2: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 263.126306][ T32] [ 263.126310][ T32] ============================================= [ 263.126310][ T32] [ 263.126318][ T32] NMI backtrace for cpu 0 [ 263.126329][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 263.126349][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 263.126359][ T32] Call Trace: [ 263.126364][ T32] [ 263.126372][ T32] dump_stack_lvl+0x100/0x190 [ 263.126406][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 263.126435][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.126457][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 263.126484][ T32] sys_info+0x141/0x190 [ 263.126503][ T32] watchdog+0xcb1/0x1030 [ 263.126530][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.126556][ T32] ? __pfx_watchdog+0x10/0x10 [ 263.126578][ T32] ? __kthread_parkme+0x18f/0x230 [ 263.126603][ T32] ? kthread+0x13a/0x450 [ 263.126626][ T32] ? __pfx_watchdog+0x10/0x10 [ 263.126644][ T32] kthread+0x373/0x450 [ 263.126668][ T32] ? __pfx_kthread+0x10/0x10 [ 263.126694][ T32] ret_from_fork+0x730/0xd60 [ 263.126715][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 263.126736][ T32] ? __switch_to+0x800/0x10f0 [ 263.126763][ T32] ? __pfx_kthread+0x10/0x10 [ 263.126785][ T32] ret_from_fork_asm+0x1a/0x30 [ 263.126817][ T32] [ 263.133180][ T32] Sending NMI from CPU 0 to CPUs 1: [ 263.133209][ C1] NMI backtrace for cpu 1 [ 263.133223][ C1] CPU: 1 UID: 0 PID: 3224 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 263.133241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 263.133251][ C1] Workqueue: bat_events batadv_dat_purge [ 263.133273][ C1] RIP: 0010:stack_depot_save_flags+0x18/0x9f0 [ 263.133296][ C1] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 83 f9 03 0f 87 e7 02 00 00 41 57 41 56 41 55 41 54 49 89 fc <55> 89 d5 53 89 cb 48 83 ec 20 e8 29 2d 95 fc 41 89 c5 85 c0 74 09 [ 263.133309][ C1] RSP: 0018:ffffc90000a182e8 EFLAGS: 00000293 [ 263.133320][ C1] RAX: 000000000000001c RBX: ffff8881b689c6b8 RCX: 0000000000000000 [ 263.133329][ C1] RDX: 0000000000000000 RSI: 000000000000001c RDI: ffffc90000a18310 [ 263.133338][ C1] RBP: 0000000000000000 R08: ffffffff91e24608 R09: 0000000000000007 [ 263.133346][ C1] R10: 0000000000000200 R11: 000000000000762b R12: ffffc90000a18310 [ 263.133355][ C1] R13: ffff8881b689c638 R14: ffff888034d40000 R15: ffff8881b6898000 [ 263.133365][ C1] FS: 0000000000000000(0000) GS:ffff888123c52000(0000) knlGS:0000000000000000 [ 263.133380][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.133389][ C1] CR2: 00007f96757f14b8 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 263.133399][ C1] Call Trace: [ 263.133403][ C1] [ 263.133410][ C1] kasan_save_stack+0x3f/0x50 [ 263.133427][ C1] ? kasan_save_stack+0x30/0x50 [ 263.133442][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 263.133463][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 263.133480][ C1] ? dst_release+0x25a/0x330 [ 263.133496][ C1] ? skb_release_head_state+0x293/0x400 [ 263.133514][ C1] ? consume_skb+0x8a/0x110 [ 263.133533][ C1] ? nft_synproxy_do_eval+0xa72/0xd30 [ 263.133552][ C1] ? nft_do_chain+0x2e5/0x19d0 [ 263.133572][ C1] ? nft_do_chain_inet+0xf3/0x400 [ 263.133589][ C1] ? nf_hook_slow+0xbf/0x220 [ 263.133604][ C1] ? nf_hook.constprop.0+0x2a6/0x750 [ 263.133620][ C1] ? ip_local_deliver+0x163/0x1f0 [ 263.133636][ C1] ? ip_rcv+0x33a/0x3c0 [ 263.133651][ C1] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 263.133668][ C1] ? __netif_receive_skb+0x1f/0x120 [ 263.133683][ C1] ? process_backlog+0x487/0x1600 [ 263.133698][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 263.133714][ C1] ? net_rx_action+0xa40/0xf20 [ 263.133729][ C1] ? handle_softirqs+0x1e6/0x9d0 [ 263.133744][ C1] ? do_softirq+0xaf/0xf0 [ 263.133758][ C1] ? __local_bh_enable_ip+0xff/0x120 [ 263.133773][ C1] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 263.133790][ C1] ? batadv_dat_purge+0x4b/0xa0 [ 263.133807][ C1] ? process_one_work+0xac7/0x1b10 [ 263.133828][ C1] ? rescuer_thread+0x918/0x14e0 [ 263.133848][ C1] ? kthread+0x373/0x450 [ 263.133866][ C1] ? ret_from_fork+0x730/0xd60 [ 263.133886][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 263.133910][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 263.133931][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 263.133948][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 263.133967][ C1] dst_release+0x25a/0x330 [ 263.133983][ C1] skb_release_head_state+0x293/0x400 [ 263.134002][ C1] consume_skb+0x8a/0x110 [ 263.134021][ C1] nft_synproxy_do_eval+0xa72/0xd30 [ 263.134042][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 263.134067][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 263.134086][ C1] nft_do_chain+0x2e5/0x19d0 [ 263.134106][ C1] ? lock_acquire+0x1d1/0x380 [ 263.134124][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 263.134144][ C1] ? mark_held_locks+0x40/0x70 [ 263.134160][ C1] ? __local_bh_enable_ip+0xa5/0x120