last executing test programs: 2.5054628s ago: executing program 1 (id=1949): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}}], 0x1, 0x24041c41) 2.280169036s ago: executing program 1 (id=1952): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c24, &(0x7f0000000040)={0x0, 0xa259, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.036433803s ago: executing program 1 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x0, 0x51) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = msgget$private(0x0, 0x3ac) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {0x0, 0xfff2}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0xbe, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xba, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x802, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x80) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r2, 0x0, 0x0, 0x2, 0x2000) msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x8, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getnexthop={0x34, 0x6a, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r11}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x80002}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.777618345s ago: executing program 3 (id=1962): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x44000, &(0x7f00000000c0)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.652942544s ago: executing program 3 (id=1966): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read(r0, &(0x7f0000000400)=""/258, 0x102) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.247246413s ago: executing program 2 (id=1977): prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) 1.128690308s ago: executing program 2 (id=1979): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.053509142s ago: executing program 2 (id=1980): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(0x0, 0x0, &(0x7f0000001a40)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1}, &(0x7f0000000840)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, 0x0) 1.053313931s ago: executing program 4 (id=1981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) 1.009646455s ago: executing program 1 (id=1982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000340), &(0x7f0000000480)=@tcp, 0x2}, 0x20) 920.334211ms ago: executing program 1 (id=1983): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100, {{0xa, 0x4e24, 0x10, @loopback, 0x2}}}, 0x88) r4 = socket(0x1e, 0x802, 0x0) epoll_create1(0x80000) close(r4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) geteuid() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x154, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_VENDOR_DATA={0x2e, 0xc5, "81bde8bcfc9340d64d29a8e9582f43fe84740571a83ef0d1cd955b1ca8d3ec9bb53fc0b59f81f3897827"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf2b7}, @NL80211_ATTR_VENDOR_DATA={0x60, 0xc5, "97ead157322efdf138470fa2efa233b40d89183da35a56f60d976722827e76f05d67198aa6d7d75f2b6250664ade160ffde06e7a4c457667de8b09fa3986f9ed285783b247e68296a00ba404f8559949c49ecb61af51fd0b33545469"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x8c, 0xc5, "af7e7536d8a8509c90f557ed2f10442d17e398d6367b1ace907b759422c654fd90d8ab1cc3154cf3c8731d60d8122b124a869d94638b500fa5c2a3e56126bdc1515e42a656d17eb1f44ef67a0e65f17664d02b368582cc4a209b0ed29e50b1487659c1e9324ede912438a79f43c938fba520af0fea8621577be61d82a29fb9e7139dd50db59baf4a"}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004081}, 0x20040008) 828.10287ms ago: executing program 4 (id=1985): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000800)={0x6, 0x8001, 0x10, {0x0, 0x12}, 0xbfd, 0x1001}) 818.387277ms ago: executing program 2 (id=1986): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x42, 0x0) pread64(r0, &(0x7f0000000200)=""/53, 0x35, 0x40) 693.239734ms ago: executing program 0 (id=1989): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000e86000/0x2000)=nil, &(0x7f000098b000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty=0xffffffff}, 0xc) 683.521836ms ago: executing program 3 (id=1990): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 580.776908ms ago: executing program 4 (id=1991): prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) 574.277313ms ago: executing program 2 (id=1992): syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x9}, 0x50) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 544.850017ms ago: executing program 0 (id=1993): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000180)={'fscrypt:', @auto=[0x63, 0x62, 0xb69f5ca05260f48, 0x39, 0x30, 0x64, 0x37, 0x66, 0x64, 0x31, 0x30, 0x62, 0x30, 0x64, 0x0, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445567778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x24}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x63, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x65, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677880502d2b9ddff7f00112233445566778899aabbccd3ceff001122aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x65, 0x66, 0x30, 0x30, 0x61, 0x38, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 464.269978ms ago: executing program 3 (id=1994): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000080)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 397.894674ms ago: executing program 4 (id=1995): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 392.203023ms ago: executing program 0 (id=1996): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1}, &(0x7f0000000840)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, 0x0) 304.759252ms ago: executing program 2 (id=1997): syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) syz_emit_ethernet(0x5e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x28, 0x2c, 0x0, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0xc6c, 0x0, 0x1}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000002e40)='asymmetric\x00', &(0x7f00000001c0)=@secondary) openat$tun(0xffffffffffffff9c, 0x0, 0x1ae42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x1b, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b14483796564dddd756c9a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009500"}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}]}}]}, 0x150}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 304.532169ms ago: executing program 0 (id=1998): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 293.862277ms ago: executing program 0 (id=1999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0xecdf, 0xfffc, 0x0, 0xa, 0x80, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x54, 0xffffffff}, 0x70bd2d, 0x800003, 0x2, 0x2, 0x0, 0x57}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x1, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x4004004) 246.882707ms ago: executing program 0 (id=2000): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read(r0, &(0x7f0000000400)=""/258, 0x102) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 149.770049ms ago: executing program 4 (id=2001): unshare(0x2a020400) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0}, 0x18) 148.46426ms ago: executing program 3 (id=2002): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x42, 0x0) pread64(r0, &(0x7f0000000200)=""/53, 0x35, 0x40) 467.819µs ago: executing program 4 (id=2003): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 304.988µs ago: executing program 3 (id=2004): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 1 (id=2005): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) kernel console output (not intermixed with test programs): xt=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 689.688176][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1458'. [ 689.841079][T11175] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 689.934340][ T31] audit: type=1326 audit(1787839691.505:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.0.1458" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6583b9e0d9 code=0x0 [ 690.350754][T11181] netlink: Unknown conntrack attr (0) [ 690.350792][T11181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.373825][ T5700] usb 3-1: 0:2 : does not exist [ 690.380337][ T5700] usb 3-1: unit 5: unexpected type 0x0c [ 690.421675][ T5700] usb 3-1: USB disconnect, device number 41 [ 690.473341][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.575503][T11187] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1462'. [ 690.732950][T11185] IPVS: sh: FWM 3 0x00000003 - no destination available [ 691.325656][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 691.490656][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 691.514370][ T10] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.514418][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 691.514461][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 691.514506][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.571638][T11196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 692.210455][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1467'. [ 693.032708][T11214] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 693.440524][T11207] 9p: Could not find request transport: fVآx0x0000000000000007 [ 694.817250][T11227] befs: (nbd3): unable to read superblock [ 695.278917][ T10] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 695.315582][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input47 [ 695.339210][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 696.648188][T11235] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1474'. [ 696.882539][ T10] usb 2-1: USB disconnect, device number 57 [ 696.882641][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 697.133272][T11241] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1476'. [ 697.156263][T11233] IPVS: sh: FWM 3 0x00000003 - no destination available [ 697.286860][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 697.293261][ T31] audit: type=1400 audit(1787839698.865:3233): avc: denied { unlink } for pid=11243 comm="syz.3.1477" name="#15" dev="tmpfs" ino=1591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 697.326790][ T31] audit: type=1400 audit(1787839698.905:3234): avc: denied { mount } for pid=11243 comm="syz.3.1477" name="/" dev="overlay" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 697.737229][ T31] audit: type=1400 audit(1787839699.315:3235): avc: denied { mount } for pid=11250 comm="syz.4.1472" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 697.760111][ T31] audit: type=1400 audit(1787839699.335:3236): avc: denied { read } for pid=11250 comm="syz.4.1472" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 697.783549][ T93] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 697.794564][ T31] audit: type=1400 audit(1787839699.365:3237): avc: denied { open } for pid=11250 comm="syz.4.1472" path="/288/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 697.854346][T11251] FAULT_INJECTION: forcing a failure. [ 697.854346][T11251] name failslab, interval 1, probability 0, space 0, times 0 [ 697.854402][T11251] CPU: 1 UID: 0 PID: 11251 Comm: syz.4.1472 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.854436][T11251] Tainted: [L]=SOFTLOCKUP [ 697.854445][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 697.854460][T11251] Call Trace: [ 697.854468][T11251] [ 697.854478][T11251] dump_stack_lvl+0x100/0x190 [ 697.854516][T11251] should_fail_ex.cold+0x5/0xa [ 697.854547][T11251] should_failslab+0xc2/0x120 [ 697.854573][T11251] __kmalloc_noprof+0xfc/0x840 [ 697.854597][T11251] ? read_kcore_iter+0x1062/0x1800 [ 697.854637][T11251] read_kcore_iter+0x1062/0x1800 [ 697.854669][T11251] ? is_bpf_text_address+0x94/0x1a0 [ 697.854706][T11251] ? __pfx_read_kcore_iter+0x10/0x10 [ 697.854747][T11251] ? _parse_integer_limit+0x1ac/0x220 [ 697.854774][T11251] ? _kstrtoull+0x144/0x200 [ 697.854793][T11251] ? __pfx__kstrtoull+0x10/0x10 [ 697.854822][T11251] ? look_up_lock_class+0x55/0x120 [ 697.854856][T11251] ? register_lock_class+0x3f/0x7b0 [ 697.854883][T11251] ? __lock_acquire+0x4c5/0x1ec0 [ 697.854910][T11251] ? __lock_acquire+0x4c5/0x1ec0 [ 697.854944][T11251] ? lock_acquire+0x1b9/0x370 [ 697.854968][T11251] ? avc_policy_seqno+0x9/0x20 [ 697.854989][T11251] ? selinux_file_permission+0x8f/0x6d0 [ 697.855026][T11251] ? proc_reg_read_iter+0x11b/0x310 [ 697.855051][T11251] proc_reg_read_iter+0x11b/0x310 [ 697.855078][T11251] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 697.855106][T11251] vfs_read+0x82e/0xb40 [ 697.855140][T11251] ? __pfx_vfs_read+0x10/0x10 [ 697.855168][T11251] ? find_held_lock+0x2b/0x80 [ 697.855214][T11251] ksys_read+0x12a/0x250 [ 697.855244][T11251] ? __pfx_ksys_read+0x10/0x10 [ 697.855282][T11251] do_syscall_64+0x123/0x790 [ 697.855316][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.855339][T11251] RIP: 0033:0x7f773f99e0d9 [ 697.855359][T11251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.855380][T11251] RSP: 002b:00007f774084d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 697.855401][T11251] RAX: ffffffffffffffda RBX: 00007f773fc25fa0 RCX: 00007f773f99e0d9 [ 697.855416][T11251] RDX: 0000000000002020 RSI: 0000200000002240 RDI: 0000000000000003 [ 697.855430][T11251] RBP: 00007f774084d090 R08: 0000000000000000 R09: 0000000000000000 [ 697.855444][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.855457][T11251] R13: 00007f773fc26038 R14: 00007f773fc25fa0 R15: 00007fff049c6ec8 [ 697.855488][T11251] [ 697.922833][ T31] audit: type=1400 audit(1787839699.495:3238): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 698.384549][ T93] usb 4-1: unable to get BOS descriptor or descriptor too short [ 698.384595][ T93] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 698.431672][ T93] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.431700][ T93] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 698.431908][ T93] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 698.431946][ T93] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 698.431986][ T93] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 698.432014][ T93] usb 4-1: config 1 interface 1 has no altsetting 0 [ 698.562306][ T93] usb 4-1: string descriptor 0 read error: -22 [ 698.562441][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.811497][ T93] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 699.028754][ T93] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 699.028812][ T93] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 699.028848][ T93] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 699.080423][ T93] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 699.137826][ T93] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 699.151994][ T93] usb 4-1: USB disconnect, device number 46 [ 699.895631][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 700.024819][ T31] audit: type=1400 audit(1787839701.595:3239): avc: denied { bind } for pid=11281 comm="syz.4.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 700.025032][ T31] audit: type=1400 audit(1787839701.595:3240): avc: denied { name_bind } for pid=11281 comm="syz.4.1485" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 700.025293][ T31] audit: type=1400 audit(1787839701.595:3241): avc: denied { node_bind } for pid=11281 comm="syz.4.1485" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 700.108724][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 700.182799][ T10] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.182891][ T10] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 700.182965][ T10] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.183115][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.311296][ T31] audit: type=1400 audit(1787839701.885:3242): avc: denied { ioctl } for pid=11281 comm="syz.4.1485" path="socket:[37171]" dev="sockfs" ino=37171 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 700.314239][T11279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.487804][T11289] FAULT_INJECTION: forcing a failure. [ 701.487804][T11289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.487858][T11289] CPU: 1 UID: 0 PID: 11289 Comm: syz.3.1487 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.487885][T11289] Tainted: [L]=SOFTLOCKUP [ 701.487891][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 701.487903][T11289] Call Trace: [ 701.487908][T11289] [ 701.487917][T11289] dump_stack_lvl+0x100/0x190 [ 701.487952][T11289] should_fail_ex.cold+0x5/0xa [ 701.487981][T11289] _copy_from_user+0x2e/0xd0 [ 701.488011][T11289] ucma_resolve_ip+0x92/0x220 [ 701.488059][T11289] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 701.488100][T11289] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 701.488131][T11289] ucma_write+0x1fb/0x330 [ 701.488160][T11289] ? __pfx_ucma_write+0x10/0x10 [ 701.488187][T11289] ? bpf_lsm_file_permission+0x9/0x10 [ 701.488213][T11289] ? security_file_permission+0x76/0x210 [ 701.488246][T11289] ? rw_verify_area+0xce/0x6d0 [ 701.488279][T11289] ? __pfx_ucma_write+0x10/0x10 [ 701.488305][T11289] vfs_writev+0x5ed/0xdd0 [ 701.488333][T11289] ? get_pid_task+0x106/0x250 [ 701.488368][T11289] ? __pfx_vfs_writev+0x10/0x10 [ 701.488399][T11289] ? rcu_read_lock_any_held+0x6a/0x90 [ 701.488447][T11289] ? __fget_files+0x21f/0x3d0 [ 701.488477][T11289] ? do_writev+0x28a/0x340 [ 701.488505][T11289] do_writev+0x28a/0x340 [ 701.488535][T11289] ? __pfx_do_writev+0x10/0x10 [ 701.488572][T11289] do_syscall_64+0x123/0x790 [ 701.488607][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.488630][T11289] RIP: 0033:0x7fbdab79e0d9 [ 701.488648][T11289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.488669][T11289] RSP: 002b:00007fbdac65e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 701.488690][T11289] RAX: ffffffffffffffda RBX: 00007fbdaba25fa0 RCX: 00007fbdab79e0d9 [ 701.488706][T11289] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000008 [ 701.488719][T11289] RBP: 00007fbdac65e090 R08: 0000000000000000 R09: 0000000000000000 [ 701.488733][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.488747][T11289] R13: 00007fbdaba26038 R14: 00007fbdaba25fa0 R15: 00007ffccc0ad148 [ 701.488777][T11289] [ 701.803301][T11293] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1489'. [ 701.920631][T11293] IPVS: sh: FWM 3 0x00000003 - no destination available [ 702.409566][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 702.409624][ T31] audit: type=1400 audit(702.339:3283): avc: denied { execute } for pid=11303 comm="syz.3.1491" name="file0" dev="tmpfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 702.409817][ T31] audit: type=1400 audit(702.349:3284): avc: denied { execute_no_trans } for pid=11303 comm="syz.3.1491" path="/290/file0" dev="tmpfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 702.409976][ T31] audit: type=1400 audit(702.349:3285): avc: denied { remount } for pid=11303 comm="syz.3.1491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 702.410151][ T31] audit: type=1400 audit(702.359:3286): avc: denied { create } for pid=11303 comm="syz.3.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 702.410299][ T31] audit: type=1400 audit(702.369:3287): avc: denied { mount } for pid=11303 comm="syz.3.1491" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 702.442288][ T31] audit: type=1400 audit(702.409:3288): avc: denied { map_create } for pid=11299 comm="syz.4.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 702.833032][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 702.842116][ T31] audit: type=1400 audit(702.799:3289): avc: denied { perfmon } for pid=11299 comm="syz.4.1490" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 702.960419][ T31] audit: type=1400 audit(702.919:3290): avc: denied { write } for pid=11299 comm="syz.4.1490" name="route" dev="proc" ino=4026533228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 703.816260][ T31] audit: type=1400 audit(703.789:3291): avc: denied { prog_run } for pid=11313 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.929217][ T31] audit: type=1400 audit(703.899:3292): avc: denied { ioctl } for pid=11318 comm="syz.3.1495" path="socket:[36546]" dev="sockfs" ino=36546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 704.678504][ T10] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 704.680460][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input48 [ 704.699351][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 704.699391][ T10] usb 3-1: USB disconnect, device number 42 [ 704.910843][T11328] netlink: Unknown conntrack attr (0) [ 704.910952][T11328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.687132][T11352] x_tables: duplicate underflow at hook 1 [ 706.726142][T11353] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1501'. [ 706.945643][ T1215] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 706.955666][ T9340] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 707.085628][ T9340] usb 2-1: device descriptor read/64, error -71 [ 707.160292][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 707.184163][T11359] netlink: 'syz.3.1503': attribute type 3 has an invalid length. [ 707.369642][ T1215] usb 3-1: Using ep0 maxpacket: 8 [ 707.394423][ T1215] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 707.461661][ T9340] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 707.477660][ T1215] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.477703][ T1215] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 707.477743][ T1215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 707.477772][ T1215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 707.477816][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.757689][ T9340] usb 2-1: device descriptor read/64, error -71 [ 707.909809][ T9340] usb usb2-port1: attempt power cycle [ 708.368353][ T1215] hub 3-1:1.0: bad descriptor, ignoring hub [ 708.368397][ T1215] hub 3-1:1.0: probe with driver hub failed with error -5 [ 708.368875][ T1215] cdc_wdm 3-1:1.0: skipping garbage [ 708.368892][ T1215] cdc_wdm 3-1:1.0: skipping garbage [ 708.680372][ T1215] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 708.680411][ T1215] cdc_wdm 3-1:1.0: Unknown control protocol [ 708.696192][ T1215] usb 3-1: USB disconnect, device number 43 [ 708.866853][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 708.866890][ T31] audit: type=1400 audit(708.839:3322): avc: denied { accept } for pid=11360 comm="syz.1.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 708.958082][ T31] audit: type=1400 audit(708.929:3323): avc: denied { read write } for pid=11362 comm="syz.3.1505" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 708.981675][ T31] audit: type=1400 audit(708.929:3324): avc: denied { open } for pid=11362 comm="syz.3.1505" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 708.981732][ T31] audit: type=1400 audit(708.939:3325): avc: denied { ioctl } for pid=11362 comm="syz.3.1505" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 708.981776][ T31] audit: type=1400 audit(708.939:3326): avc: denied { create } for pid=11362 comm="syz.3.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 709.235975][ T1215] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 709.298450][T11367] befs: (nbd3): unable to read superblock [ 709.385689][ T1215] usb 3-1: Using ep0 maxpacket: 8 [ 709.393526][ T1215] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 709.409459][ T1215] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.420353][ T1215] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 709.420564][ T1215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 709.420630][ T1215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 709.420766][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.679065][ T1215] hub 3-1:1.0: bad descriptor, ignoring hub [ 709.679110][ T1215] hub 3-1:1.0: probe with driver hub failed with error -5 [ 709.679605][ T1215] cdc_wdm 3-1:1.0: skipping garbage [ 709.679627][ T1215] cdc_wdm 3-1:1.0: skipping garbage [ 709.687841][ T31] audit: type=1400 audit(709.659:3327): avc: denied { ioctl } for pid=11368 comm="syz.4.1506" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 709.688828][ T31] audit: type=1400 audit(709.659:3328): avc: denied { set_context_mgr } for pid=11368 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 709.753917][ T1215] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 709.760280][ T1215] cdc_wdm 3-1:1.0: Unknown control protocol [ 710.114874][T11377] befs: (nbd1): unable to read superblock [ 710.392303][ T31] audit: type=1400 audit(710.359:3329): avc: denied { create } for pid=11368 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 710.485090][ T31] audit: type=1400 audit(710.449:3330): avc: denied { connect } for pid=11368 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 710.735956][ T986] usb 3-1: USB disconnect, device number 44 [ 710.743048][ T31] audit: type=1400 audit(710.709:3331): avc: denied { write } for pid=11368 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 711.944564][T11392] befs: (nbd2): unable to read superblock [ 712.379168][T11386] netlink: Unknown conntrack attr (0) [ 712.379206][T11386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.460813][T11397] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 712.631933][T11402] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1513'. [ 712.842496][T11400] IPVS: sh: FWM 3 0x00000003 - no destination available [ 713.069053][T11413] IPVS: sh: FWM 3 0x00000003 - no destination available [ 713.638218][ T986] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 713.786417][ T986] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.798211][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.809529][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.821997][ T986] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 713.835816][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.919343][ T986] usb 3-1: config 0 descriptor?? [ 714.549084][ T986] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x5 [ 714.556629][ T986] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 714.564114][ T986] plantronics 0003:047F:FFFF.0014: item fetching failed at offset 9/15 [ 714.572812][ T986] plantronics 0003:047F:FFFF.0014: parse failed [ 714.579343][ T986] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 715.244464][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 715.244509][ T31] audit: type=1400 audit(715.199:3340): avc: denied { create } for pid=11426 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 715.244558][ T31] audit: type=1400 audit(715.199:3341): avc: denied { create } for pid=11426 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 715.244600][ T31] audit: type=1400 audit(715.199:3342): avc: denied { setopt } for pid=11426 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 715.430152][T11425] IPVS: sh: FWM 3 0x00000003 - no destination available [ 715.671630][T11440] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1524'. [ 715.768690][ T1215] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 716.318806][ T31] audit: type=1400 audit(715.969:3343): avc: denied { create } for pid=11439 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 716.444831][ T1215] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 716.445956][ T1215] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.445979][ T1215] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.517972][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 716.518001][ T1215] usb 2-1: SerialNumber: syz [ 716.623719][ T10] usb 3-1: USB disconnect, device number 45 [ 716.690365][ T31] audit: type=1400 audit(716.659:3344): avc: denied { create } for pid=11444 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 716.741406][ T31] audit: type=1400 audit(716.709:3345): avc: denied { write } for pid=11444 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 716.779541][T11447] netlink: Unknown conntrack attr (0) [ 716.779571][T11447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.789931][ T1215] usb 2-1: 0:2 : does not exist [ 716.790010][ T1215] usb 2-1: unit 5: unexpected type 0x0c [ 716.847225][T11445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1525'. [ 716.855167][T11449] FAULT_INJECTION: forcing a failure. [ 716.855167][T11449] name failslab, interval 1, probability 0, space 0, times 0 [ 716.855201][T11449] CPU: 1 UID: 0 PID: 11449 Comm: syz.2.1526 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.855232][T11449] Tainted: [L]=SOFTLOCKUP [ 716.855241][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 716.855255][T11449] Call Trace: [ 716.855262][T11449] [ 716.855271][T11449] dump_stack_lvl+0x100/0x190 [ 716.855307][T11449] should_fail_ex.cold+0x5/0xa [ 716.855337][T11449] should_failslab+0xc2/0x120 [ 716.855363][T11449] __kmalloc_noprof+0xfc/0x840 [ 716.855385][T11449] ? dma_heap_ioctl+0x14b/0x610 [ 716.855418][T11449] dma_heap_ioctl+0x14b/0x610 [ 716.855449][T11449] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 716.855487][T11449] ? selinux_file_ioctl+0x13b/0x290 [ 716.855520][T11449] ? selinux_file_ioctl+0xb6/0x290 [ 716.855551][T11449] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 716.855581][T11449] __x64_sys_ioctl+0x18e/0x210 [ 716.855615][T11449] do_syscall_64+0x123/0x790 [ 716.855650][T11449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.855672][T11449] RIP: 0033:0x7f91f0b9e0d9 [ 716.855691][T11449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.855710][T11449] RSP: 002b:00007f91f1b54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.855732][T11449] RAX: ffffffffffffffda RBX: 00007f91f0e25fa0 RCX: 00007f91f0b9e0d9 [ 716.855747][T11449] RDX: 0000200000000080 RSI: 00000000c1007c00 RDI: 0000000000000003 [ 716.855761][T11449] RBP: 00007f91f1b54090 R08: 0000000000000000 R09: 0000000000000000 [ 716.855775][T11449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.855787][T11449] R13: 00007f91f0e26038 R14: 00007f91f0e25fa0 R15: 00007ffd069c7f98 [ 716.855816][T11449] [ 717.074484][T11450] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 717.327095][T11454] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1528'. [ 718.104032][ T1215] usb 2-1: USB disconnect, device number 61 [ 718.160565][ T31] audit: type=1400 audit(718.129:3346): avc: denied { create } for pid=11458 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 718.179799][ T31] audit: type=1400 audit(718.129:3347): avc: denied { getopt } for pid=11458 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 718.179830][ T31] audit: type=1400 audit(718.129:3348): avc: denied { shutdown } for pid=11458 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 718.356457][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1532'. [ 718.356556][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'. [ 718.789851][ T31] audit: type=1400 audit(718.749:3349): avc: denied { mount } for pid=11461 comm="syz.1.1530" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 719.381652][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.397978][T11452] IPVS: sh: FWM 3 0x00000003 - no destination available [ 719.609904][T11473] netlink: Unknown conntrack attr (0) [ 719.610017][T11473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.646221][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 720.646257][ T31] audit: type=1400 audit(720.619:3359): avc: denied { ioctl } for pid=11477 comm="syz.0.1535" path="socket:[38919]" dev="sockfs" ino=38919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 721.146270][T11489] befs: (nbd3): unable to read superblock [ 722.307372][T11480] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c57 pfn:0x4a800 [ 722.351799][T11480] head: order:4 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 722.365723][T11480] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 722.365814][T11480] page_type: f8(unknown) [ 722.365932][T11480] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 722.366068][T11480] raw: 0000000000001c57 0000000000000000 00000000f8000000 0000000000000000 [ 722.366200][T11480] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 722.366310][T11480] head: 0000000000001c57 0000000000000000 00000000f8000000 0000000000000000 [ 722.366421][T11480] head: 00fff00000000004 fffffffffffffc01 00000000ffffffff 00000000ffffffff [ 722.366532][T11480] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000010 [ 722.366615][T11480] page dumped because: unmovable page [ 722.493254][T11480] page_owner tracks the page as allocated [ 722.493454][T11480] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 8270, tgid 8269 (syz.3.665), ts 343424972842 [ 722.500830][T11480] post_alloc_hook+0xfd/0x120 [ 722.500900][T11480] get_page_from_freelist+0x110d/0x35b0 [ 722.500938][T11480] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 722.500976][T11480] alloc_pages_mpol+0x201/0x550 [ 722.501010][T11480] ___kmalloc_large_node+0xe8/0x130 [ 722.501065][T11480] __kmalloc_large_node_noprof+0x1c/0x70 [ 722.501119][T11480] __kmalloc_noprof+0x5a8/0x840 [ 722.501140][T11480] wiphy_new_nm+0x701/0x21a0 [ 722.501205][T11480] ieee80211_alloc_hw_nm+0x1b2e/0x2310 [ 722.501269][T11480] mac80211_hwsim_new_radio+0x1de/0x6510 [ 722.501304][T11480] hwsim_new_radio_nl+0xc6b/0x13f0 [ 722.501334][T11480] genl_family_rcv_msg_doit+0x214/0x300 [ 722.520397][T11480] genl_rcv_msg+0x560/0x800 [ 722.574878][ T31] audit: type=1400 audit(722.519:3360): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 722.649948][ T31] audit: type=1400 audit(722.619:3361): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.685844][ T5811] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 722.702394][T11480] netlink_rcv_skb+0x159/0x420 [ 722.707488][T11480] genl_rcv+0x28/0x40 [ 722.707554][T11480] netlink_unicast+0x585/0x850 [ 722.707594][T11480] page last free pid 10 tgid 10 ts 343085954880 stack trace: [ 722.707674][T11480] free_pages_prepare+0x586/0xe00 [ 722.707709][T11480] __free_contig_range_common+0x14f/0x250 [ 722.707744][T11480] free_pages_bulk+0xbd/0x200 [ 722.707782][T11480] vm_area_free_pages+0xad/0x2b0 [ 722.707857][T11480] vfree+0x108/0x730 [ 722.707889][T11480] hid_open_report+0x600/0x810 [ 722.707921][T11480] hidled_probe+0x9e/0x6f0 [ 722.707960][T11480] hid_device_probe+0x4fe/0x850 [ 722.707988][T11480] really_probe+0x241/0xa60 [ 722.708022][T11480] __driver_probe_device+0x210/0x460 [ 722.708056][T11480] driver_probe_device+0x4a/0x140 [ 722.708127][T11480] __device_attach_driver+0x1df/0x320 [ 722.708175][T11480] bus_for_each_drv+0x159/0x1e0 [ 722.708207][T11480] __device_attach+0x1e4/0x4d0 [ 722.708242][T11480] device_initial_probe+0xaf/0xd0 [ 722.708278][T11480] bus_probe_device+0x64/0x160 [ 722.756722][ T31] audit: type=1400 audit(722.649:3362): avc: denied { append } for pid=4951 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.785805][ T31] audit: type=1400 audit(722.729:3363): avc: denied { open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.903765][ T31] audit: type=1400 audit(722.869:3364): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.982723][ T5811] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 723.001631][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.118499][ T5811] usb 3-1: config 0 descriptor?? [ 723.215013][ T5811] cp210x 3-1:0.0: cp210x converter detected [ 723.455054][ T31] audit: type=1400 audit(723.409:3365): avc: denied { map } for pid=11500 comm="syz.2.1539" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 723.455450][ T31] audit: type=1400 audit(723.409:3366): avc: denied { read write } for pid=11500 comm="syz.2.1539" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 723.984048][ T5811] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 723.984263][ T5811] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 724.412734][ T5811] usb 3-1: cp210x converter now attached to ttyUSB0 [ 724.514338][ T5811] usb 3-1: USB disconnect, device number 46 [ 724.520275][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 724.524345][ T5811] cp210x 3-1:0.0: device disconnected [ 724.586497][T11509] netlink: Unknown conntrack attr (0) [ 724.586527][T11509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.627634][ T31] audit: type=1400 audit(724.599:3367): avc: denied { append } for pid=11505 comm="syz.3.1540" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 724.759163][ T31] audit: type=1800 audit(724.629:3368): pid=11512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1541" name="memory_backed" dev="configfs" ino=37962 res=0 errno=0 [ 725.344674][T11523] IPVS: sh: FWM 3 0x00000003 - no destination available [ 725.765821][T11528] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1546'. [ 725.886066][T11531] jffs2: notice: (11531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 725.923519][ T31] audit: type=1400 audit(725.889:3369): avc: denied { mount } for pid=11530 comm="syz.2.1547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 725.939194][T11531] capability: warning: `syz.2.1547' uses 32-bit capabilities (legacy support in use) [ 725.948009][T11531] program syz.2.1547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.954768][ T31] audit: type=1400 audit(725.909:3370): avc: denied { read } for pid=11530 comm="syz.2.1547" name="sg0" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 725.954825][ T31] audit: type=1400 audit(725.909:3371): avc: denied { open } for pid=11530 comm="syz.2.1547" path="/dev/sg0" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 725.985845][ T31] audit: type=1400 audit(725.949:3372): avc: denied { write } for pid=11530 comm="syz.2.1547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.037672][ T31] audit: type=1400 audit(726.009:3373): avc: denied { add_name } for pid=11530 comm="syz.2.1547" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.037725][ T31] audit: type=1400 audit(726.009:3374): avc: denied { create } for pid=11530 comm="syz.2.1547" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 726.037762][ T31] audit: type=1400 audit(726.009:3375): avc: denied { read write open } for pid=11530 comm="syz.2.1547" path="/306/file0/test" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 726.038073][T11526] IPVS: sh: FWM 3 0x00000003 - no destination available [ 726.377712][ T31] audit: type=1400 audit(726.349:3376): avc: denied { bind } for pid=11535 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 726.378015][ T31] audit: type=1400 audit(726.349:3377): avc: denied { name_bind } for pid=11535 comm="syz.2.1548" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 726.378258][ T31] audit: type=1400 audit(726.349:3378): avc: denied { node_bind } for pid=11535 comm="syz.2.1548" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 726.420583][ T5811] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 726.569122][ T5811] usb 4-1: device descriptor read/64, error -71 [ 726.915661][ T5811] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 727.119955][T11548] befs: (nbd4): unable to read superblock [ 727.580736][ T5811] usb 4-1: device descriptor read/64, error -71 [ 727.700022][ T5811] usb usb4-port1: attempt power cycle [ 728.055747][ T5811] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 728.079949][ T5811] usb 4-1: device descriptor read/8, error -71 [ 728.357700][ T5811] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 728.504333][ T5811] usb 4-1: device descriptor read/8, error -71 [ 728.616096][ T5811] usb usb4-port1: unable to enumerate USB device [ 728.709106][T11555] binder: 11552:11555 ioctl c0306201 0 returned -14 [ 729.187539][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 729.207027][T11568] netlink: 'syz.1.1557': attribute type 3 has an invalid length. [ 730.886213][T11562] 9p: Could not find request transport: fVآx0x0000000000000007 [ 730.922378][T11579] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1559'. [ 730.980811][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 730.980847][ T31] audit: type=1400 audit(730.949:3432): avc: denied { map_create } for pid=11557 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.016545][ T31] audit: type=1400 audit(730.989:3433): avc: denied { read } for pid=11557 comm="syz.3.1553" dev="nsfs" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 731.019420][ T31] audit: type=1400 audit(730.989:3434): avc: denied { open } for pid=11557 comm="syz.3.1553" path="net:[4026533346]" dev="nsfs" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 731.113864][ T31] audit: type=1400 audit(731.079:3435): avc: denied { ioctl } for pid=11571 comm="syz.2.1558" path="socket:[39209]" dev="sockfs" ino=39209 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.163753][ T31] audit: type=1400 audit(731.129:3436): avc: denied { sys_module } for pid=11571 comm="syz.2.1558" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 731.195216][ T31] audit: type=1400 audit(731.159:3437): avc: denied { allowed } for pid=11571 comm="syz.2.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 731.195285][ T31] audit: type=1400 audit(731.159:3438): avc: denied { create } for pid=11571 comm="syz.2.1558" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 731.204337][ T31] audit: type=1400 audit(731.159:3439): avc: denied { map } for pid=11571 comm="syz.2.1558" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 731.204664][ T31] audit: type=1400 audit(731.159:3440): avc: denied { read write } for pid=11571 comm="syz.2.1558" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 731.312958][ T31] audit: type=1400 audit(731.279:3441): avc: denied { read write } for pid=11587 comm="syz.0.1561" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 731.666049][T11592] befs: (nbd0): unable to read superblock [ 731.995337][T11576] IPVS: sh: FWM 3 0x00000003 - no destination available [ 732.361451][T11574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1550 sclass=netlink_tcpdiag_socket pid=11574 comm=syz.2.1558 [ 733.058372][T11619] ieee802154 phy0 wpan0: encryption failed: -22 [ 733.874734][T11631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1575'. [ 734.076702][T11633] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 735.812312][T11648] FAULT_INJECTION: forcing a failure. [ 735.812312][T11648] name failslab, interval 1, probability 0, space 0, times 0 [ 735.812364][T11648] CPU: 0 UID: 0 PID: 11648 Comm: syz.0.1580 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.812395][T11648] Tainted: [L]=SOFTLOCKUP [ 735.812403][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 735.812418][T11648] Call Trace: [ 735.812425][T11648] [ 735.812434][T11648] dump_stack_lvl+0x100/0x190 [ 735.812470][T11648] should_fail_ex.cold+0x5/0xa [ 735.812500][T11648] should_failslab+0xc2/0x120 [ 735.812527][T11648] __kmalloc_cache_node_noprof+0x94/0x720 [ 735.812553][T11648] ? __get_vm_area_node+0x124/0x350 [ 735.812584][T11648] __get_vm_area_node+0x124/0x350 [ 735.812614][T11648] __vmalloc_node_range_noprof+0x262/0x1460 [ 735.812642][T11648] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 735.812668][T11648] ? __lock_acquire+0x4c5/0x1ec0 [ 735.812694][T11648] ? up_write+0x2dc/0x5b0 [ 735.812724][T11648] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 735.812753][T11648] ? find_held_lock+0x2b/0x80 [ 735.812782][T11648] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 735.812809][T11648] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 735.812838][T11648] ? avc_has_perm_noaudit+0x145/0x3b0 [ 735.812863][T11648] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 735.812888][T11648] __vmalloc_node_noprof+0xad/0xf0 [ 735.812915][T11648] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 735.812946][T11648] __vmalloc_noprof+0xa3/0x120 [ 735.812972][T11648] ? __pfx___vmalloc_noprof+0x10/0x10 [ 735.813001][T11648] ? rcu_is_watching+0x13/0xc0 [ 735.813029][T11648] ? cap_capable+0x107/0x430 [ 735.813058][T11648] bpf_prog_alloc_no_stats+0x59/0x690 [ 735.813087][T11648] ? security_capable+0x80/0x260 [ 735.813115][T11648] bpf_prog_alloc+0x3b/0x200 [ 735.813139][T11648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 735.813167][T11648] bpf_prog_load+0x49e/0x2a80 [ 735.813202][T11648] ? __pfx_bpf_prog_load+0x10/0x10 [ 735.813261][T11648] __sys_bpf+0x1f46/0x4a30 [ 735.813290][T11648] ? __pfx___sys_bpf+0x10/0x10 [ 735.813311][T11648] ? find_held_lock+0x2b/0x80 [ 735.813338][T11648] ? get_pid_task+0xfc/0x250 [ 735.813366][T11648] ? get_pid_task+0xfc/0x250 [ 735.813403][T11648] ? find_held_lock+0x2b/0x80 [ 735.813439][T11648] ? rcu_read_lock_any_held+0x6a/0x90 [ 735.813470][T11648] ? find_held_lock+0x2b/0x80 [ 735.813498][T11648] ? ksys_write+0x190/0x250 [ 735.813529][T11648] ? ksys_write+0x190/0x250 [ 735.813582][T11648] ? fput+0x7c/0x100 [ 735.813605][T11648] ? ksys_write+0x1ac/0x250 [ 735.813644][T11648] ? __x64_sys_bpf+0xce/0x140 [ 735.813664][T11648] __x64_sys_bpf+0xce/0x140 [ 735.813686][T11648] ? do_syscall_64+0xae/0x790 [ 735.813719][T11648] do_syscall_64+0x123/0x790 [ 735.813752][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.813775][T11648] RIP: 0033:0x7f6583b9e0d9 [ 735.813794][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.813815][T11648] RSP: 002b:00007f6584a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.813837][T11648] RAX: ffffffffffffffda RBX: 00007f6583e25fa0 RCX: 00007f6583b9e0d9 [ 735.813852][T11648] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 735.813865][T11648] RBP: 00007f6584a98090 R08: 0000000000000000 R09: 0000000000000000 [ 735.813879][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.813892][T11648] R13: 00007f6583e26038 R14: 00007f6583e25fa0 R15: 00007fffe6cc2a18 [ 735.813923][T11648] [ 735.813972][T11648] syz.0.1580: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 735.814052][T11648] CPU: 0 UID: 0 PID: 11648 Comm: syz.0.1580 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.814082][T11648] Tainted: [L]=SOFTLOCKUP [ 735.814090][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 735.814104][T11648] Call Trace: [ 735.814111][T11648] [ 735.814120][T11648] dump_stack_lvl+0x100/0x190 [ 735.814153][T11648] warn_alloc.cold+0x9e/0xb2 [ 735.814178][T11648] ? __pfx_warn_alloc+0x10/0x10 [ 735.814209][T11648] ? __kasan_kmalloc+0x8a/0xb0 [ 735.814249][T11648] ? __get_vm_area_node+0x22b/0x350 [ 735.814280][T11648] __vmalloc_node_range_noprof+0xf6b/0x1460 [ 735.814307][T11648] ? __lock_acquire+0x4c5/0x1ec0 [ 735.814333][T11648] ? up_write+0x2dc/0x5b0 [ 735.814362][T11648] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 735.814394][T11648] ? find_held_lock+0x2b/0x80 [ 735.814423][T11648] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 735.814450][T11648] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 735.814480][T11648] ? avc_has_perm_noaudit+0x145/0x3b0 [ 735.814505][T11648] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 735.814531][T11648] __vmalloc_node_noprof+0xad/0xf0 [ 735.814558][T11648] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 735.814588][T11648] __vmalloc_noprof+0xa3/0x120 [ 735.814615][T11648] ? __pfx___vmalloc_noprof+0x10/0x10 [ 735.814644][T11648] ? rcu_is_watching+0x13/0xc0 [ 735.814672][T11648] ? cap_capable+0x107/0x430 [ 735.814701][T11648] bpf_prog_alloc_no_stats+0x59/0x690 [ 735.814726][T11648] ? security_capable+0x80/0x260 [ 735.814753][T11648] bpf_prog_alloc+0x3b/0x200 [ 735.814777][T11648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 735.814803][T11648] bpf_prog_load+0x49e/0x2a80 [ 735.814837][T11648] ? __pfx_bpf_prog_load+0x10/0x10 [ 735.814890][T11648] __sys_bpf+0x1f46/0x4a30 [ 735.814916][T11648] ? __pfx___sys_bpf+0x10/0x10 [ 735.814936][T11648] ? find_held_lock+0x2b/0x80 [ 735.814964][T11648] ? get_pid_task+0xfc/0x250 [ 735.814991][T11648] ? get_pid_task+0xfc/0x250 [ 735.815029][T11648] ? find_held_lock+0x2b/0x80 [ 735.815064][T11648] ? rcu_read_lock_any_held+0x6a/0x90 [ 735.815094][T11648] ? find_held_lock+0x2b/0x80 [ 735.815122][T11648] ? ksys_write+0x190/0x250 [ 735.815153][T11648] ? ksys_write+0x190/0x250 [ 735.815206][T11648] ? fput+0x7c/0x100 [ 735.815237][T11648] ? ksys_write+0x1ac/0x250 [ 735.815272][T11648] ? __x64_sys_bpf+0xce/0x140 [ 735.815292][T11648] __x64_sys_bpf+0xce/0x140 [ 735.815314][T11648] ? do_syscall_64+0xae/0x790 [ 735.815348][T11648] do_syscall_64+0x123/0x790 [ 735.815382][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.815405][T11648] RIP: 0033:0x7f6583b9e0d9 [ 735.815423][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.815444][T11648] RSP: 002b:00007f6584a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.815462][T11648] RAX: ffffffffffffffda RBX: 00007f6583e25fa0 RCX: 00007f6583b9e0d9 [ 735.815477][T11648] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 735.815492][T11648] RBP: 00007f6584a98090 R08: 0000000000000000 R09: 0000000000000000 [ 735.815507][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.815517][T11648] R13: 00007f6583e26038 R14: 00007f6583e25fa0 R15: 00007fffe6cc2a18 [ 735.815545][T11648] [ 735.816087][T11648] Mem-Info: [ 735.816101][T11648] active_anon:24732 inactive_anon:0 isolated_anon:0 [ 735.816101][T11648] active_file:0 inactive_file:63713 isolated_file:0 [ 735.816101][T11648] unevictable:0 dirty:470 writeback:0 [ 735.816101][T11648] slab_reclaimable:12216 slab_unreclaimable:100959 [ 735.816101][T11648] mapped:43210 shmem:12029 pagetables:1444 [ 735.816101][T11648] sec_pagetables:0 bounce:0 [ 735.816101][T11648] kernel_misc_reclaimable:0 [ 735.816101][T11648] free:1269013 free_pcp:11894 free_cma:0 [ 735.816169][T11648] Node 0 active_anon:98928kB inactive_anon:0kB active_file:0kB inactive_file:254644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172840kB dirty:1880kB writeback:0kB shmem:48116kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12732kB pagetables:5672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 735.816236][T11648] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 735.816292][T11648] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.816356][T11648] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 735.816410][T11648] Node 0 DMA32 free:1114476kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98928kB inactive_anon:0kB active_file:0kB inactive_file:254644kB unevictable:0kB writepending:1880kB zspages:0kB present:3129332kB managed:2530384kB mlocked:0kB bounce:0kB free_pcp:47568kB local_pcp:20708kB free_cma:0kB [ 735.816478][T11648] lowmem_reserve[]: 0 0 0 0 0 [ 735.816530][T11648] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:80kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.816594][T11648] lowmem_reserve[]: 0 0 0 0 0 [ 735.816647][T11648] Node 1 Normal free:3946216kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.816713][T11648] lowmem_reserve[]: 0 0 0 0 0 [ 735.816765][T11648] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 735.816929][T11648] Node 0 DMA32: 1727*4kB (UM) 1512*8kB (UME) 963*16kB (UME) 1028*32kB (UME) 336*64kB (UME) 69*128kB (UME) 222*256kB (UM) 127*512kB (UM) 44*1024kB (UM) 27*2048kB (UME) 194*4096kB (UM) = 1114476kB [ 735.817170][T11648] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 735.817313][T11648] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 6*16kB (UM) 3*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (M) = 3946216kB [ 735.817541][T11648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.817561][T11648] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 735.817601][T11648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.817621][T11648] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 735.817641][T11648] 75763 total pagecache pages [ 735.817652][T11648] 0 pages in swap cache [ 735.817662][T11648] Free swap = 124996kB [ 735.817672][T11648] Total swap = 124996kB [ 735.817683][T11648] 2097051 pages RAM [ 735.817693][T11648] 0 pages HighMem/MovableOnly [ 735.817703][T11648] 432819 pages reserved [ 735.817714][T11648] 0 pages cma reserved [ 736.077076][T11652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1579'. [ 736.085775][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 736.085808][ T31] audit: type=1400 audit(736.029:3496): avc: denied { mount } for pid=11624 comm="syz.2.1574" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 736.157903][T11653] befs: (nbd1): unable to read superblock [ 736.410008][ T5700] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 736.556557][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 736.557301][ T5700] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 736.558712][ T5700] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 736.558755][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.558782][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 736.558810][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 736.564076][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.564100][ T5700] usb 4-1: Product: syz [ 736.564116][ T5700] usb 4-1: Manufacturer: syz [ 736.564132][ T5700] usb 4-1: SerialNumber: syz [ 736.576659][ T5700] usb 4-1: config 0 descriptor?? [ 736.580209][T11643] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.650477][ T31] audit: type=1400 audit(736.589:3497): avc: denied { read } for pid=11654 comm="syz.0.1581" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 736.650525][ T31] audit: type=1400 audit(736.619:3498): avc: denied { open } for pid=11654 comm="syz.0.1581" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 736.767991][ T31] audit: type=1400 audit(736.739:3499): avc: denied { ioctl } for pid=11654 comm="syz.0.1581" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 737.136220][ T31] audit: type=1400 audit(737.099:3500): avc: denied { getopt } for pid=11641 comm="syz.3.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 737.471628][ T31] audit: type=1400 audit(737.439:3501): avc: denied { setopt } for pid=11661 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 737.485640][ T31] audit: type=1400 audit(737.439:3502): avc: denied { connect } for pid=11661 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 737.485690][ T31] audit: type=1400 audit(737.449:3503): avc: denied { write } for pid=11661 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 737.584093][ T5700] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 737.589262][ T5700] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 737.592749][ T31] audit: type=1400 audit(737.559:3504): avc: denied { read } for pid=4954 comm="acpid" name="event4" dev="devtmpfs" ino=3818 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 737.592847][ T31] audit: type=1400 audit(737.559:3505): avc: denied { open } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3818 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 737.858146][T11670] mmap: syz.1.1586 (11670): VmData 37855232 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 739.002343][T11696] FAULT_INJECTION: forcing a failure. [ 739.002343][T11696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.081604][T11697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1592'. [ 739.122572][T11697] befs: (nbd2): unable to read superblock [ 739.409067][T11696] CPU: 1 UID: 0 PID: 11696 Comm: syz.1.1594 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.409102][T11696] Tainted: [L]=SOFTLOCKUP [ 739.409111][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 739.409125][T11696] Call Trace: [ 739.409133][T11696] [ 739.409142][T11696] dump_stack_lvl+0x100/0x190 [ 739.409178][T11696] should_fail_ex.cold+0x5/0xa [ 739.409209][T11696] _copy_from_iter+0x1f4/0x1690 [ 739.409241][T11696] ? __asan_memset+0x23/0x50 [ 739.409274][T11696] ? __pfx__copy_from_iter+0x10/0x10 [ 739.409302][T11696] ? __pfx___alloc_skb+0x10/0x10 [ 739.409342][T11696] netlink_sendmsg+0x808/0xda0 [ 739.409375][T11696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.409407][T11696] ? selinux_socket_sendmsg+0x198/0x2f0 [ 739.409439][T11696] ____sys_sendmsg+0xa4d/0xbe0 [ 739.409459][T11696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.409488][T11696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.409525][T11696] ___sys_sendmsg+0x190/0x1e0 [ 739.409551][T11696] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.409576][T11696] ? get_pid_task+0x106/0x250 [ 739.409616][T11696] ? find_held_lock+0x2b/0x80 [ 739.409662][T11696] __sys_sendmsg+0x160/0x210 [ 739.409693][T11696] ? __pfx___sys_sendmsg+0x10/0x10 [ 739.409739][T11696] do_syscall_64+0x123/0x790 [ 739.409775][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.409798][T11696] RIP: 0033:0x7fec5f59e0d9 [ 739.409817][T11696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.409838][T11696] RSP: 002b:00007fec603b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.409859][T11696] RAX: ffffffffffffffda RBX: 00007fec5f825fa0 RCX: 00007fec5f59e0d9 [ 739.409875][T11696] RDX: 000000000000c010 RSI: 0000200000000000 RDI: 0000000000000003 [ 739.409889][T11696] RBP: 00007fec603b1090 R08: 0000000000000000 R09: 0000000000000000 [ 739.409903][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.409916][T11696] R13: 00007fec5f826038 R14: 00007fec5f825fa0 R15: 00007fff9eecdb68 [ 739.409947][T11696] [ 739.493301][ C0] powermate: config urb returned -71 [ 739.493546][ C0] powermate: config urb returned -71 [ 739.493730][ C0] powermate: config urb returned -71 [ 739.495821][ T5700] usb 4-1: USB disconnect, device number 51 [ 739.495870][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 740.299311][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 740.550300][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'. [ 741.644735][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 741.644772][ T31] audit: type=1400 audit(741.609:3524): avc: denied { ioctl } for pid=11734 comm="syz.2.1606" path="socket:[38403]" dev="sockfs" ino=38403 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 743.969973][ T31] audit: type=1400 audit(743.939:3525): avc: denied { read write } for pid=5597 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 744.023024][ T31] audit: type=1400 audit(743.989:3526): avc: denied { open } for pid=5600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 744.046852][ T31] audit: type=1400 audit(743.989:3527): avc: denied { ioctl } for pid=5600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 744.072604][ T31] audit: type=1400 audit(743.989:3528): avc: denied { read write } for pid=11749 comm="syz.3.1609" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 744.072673][ T31] audit: type=1400 audit(743.989:3529): avc: denied { open } for pid=11749 comm="syz.3.1609" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 744.072720][ T31] audit: type=1400 audit(743.989:3530): avc: denied { ioctl } for pid=11749 comm="syz.3.1609" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 744.072770][ T31] audit: type=1400 audit(744.019:3531): avc: denied { execmem } for pid=11749 comm="syz.3.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 744.230023][ T31] audit: type=1400 audit(744.169:3532): avc: denied { accept } for pid=11748 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 744.230098][ T31] audit: type=1400 audit(744.199:3533): avc: denied { create } for pid=11752 comm="syz.1.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 744.339028][T11756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1609'. [ 744.421231][T11757] befs: (nbd3): unable to read superblock [ 745.240337][T11771] FAULT_INJECTION: forcing a failure. [ 745.240337][T11771] name failslab, interval 1, probability 0, space 0, times 0 [ 745.240518][T11771] CPU: 0 UID: 0 PID: 11771 Comm: syz.1.1615 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.240551][T11771] Tainted: [L]=SOFTLOCKUP [ 745.240561][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 745.240575][T11771] Call Trace: [ 745.240583][T11771] [ 745.240593][T11771] dump_stack_lvl+0x100/0x190 [ 745.240635][T11771] should_fail_ex.cold+0x5/0xa [ 745.240666][T11771] should_failslab+0xc2/0x120 [ 745.240692][T11771] __kmalloc_cache_noprof+0x91/0x6d0 [ 745.240725][T11771] ? copy_mount_options+0x55/0x190 [ 745.240765][T11771] copy_mount_options+0x55/0x190 [ 745.240799][T11771] __x64_sys_mount+0x1ab/0x310 [ 745.240829][T11771] ? __pfx___x64_sys_mount+0x10/0x10 [ 745.240867][T11771] do_syscall_64+0x123/0x790 [ 745.240904][T11771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.240927][T11771] RIP: 0033:0x7fec5f59e0d9 [ 745.240946][T11771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.240967][T11771] RSP: 002b:00007fec603b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 745.240990][T11771] RAX: ffffffffffffffda RBX: 00007fec5f825fa0 RCX: 00007fec5f59e0d9 [ 745.241005][T11771] RDX: 00002000000000c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 745.241020][T11771] RBP: 00007fec603b1090 R08: 0000200000002780 R09: 0000000000000000 [ 745.241034][T11771] R10: 0000000000014c98 R11: 0000000000000246 R12: 0000000000000001 [ 745.241048][T11771] R13: 00007fec5f826038 R14: 00007fec5f825fa0 R15: 00007fff9eecdb68 [ 745.241079][T11771] [ 746.030307][T11776] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 746.800874][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 746.807273][ T31] audit: type=1400 audit(746.769:3553): avc: denied { create } for pid=11783 comm="syz.4.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 746.826699][ T31] audit: type=1400 audit(746.779:3554): avc: denied { create } for pid=11778 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 746.830895][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 746.851112][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 746.871550][ T31] audit: type=1400 audit(746.779:3555): avc: denied { write } for pid=11778 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 746.871596][ T31] audit: type=1400 audit(746.779:3556): avc: denied { read } for pid=11778 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 746.892791][ T31] audit: type=1400 audit(746.859:3557): avc: denied { create } for pid=11785 comm="syz.1.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 746.898221][ T31] audit: type=1400 audit(746.869:3558): avc: denied { read } for pid=11783 comm="syz.4.1620" dev="nsfs" ino=4026533207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 746.904431][ T31] audit: type=1400 audit(746.869:3559): avc: denied { open } for pid=11783 comm="syz.4.1620" path="net:[4026533207]" dev="nsfs" ino=4026533207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 747.050422][T11784] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1620'. [ 747.063983][ T31] audit: type=1400 audit(747.029:3560): avc: denied { read write } for pid=11783 comm="syz.4.1620" name="frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 747.064057][ T31] audit: type=1400 audit(747.029:3561): avc: denied { open } for pid=11783 comm="syz.4.1620" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 747.176709][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.176796][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.257770][T11795] befs: (nbd1): unable to read superblock [ 747.325432][ T31] audit: type=1400 audit(747.289:3562): avc: denied { ioctl } for pid=11783 comm="syz.4.1620" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=925 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 747.352463][T11784] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 747.862008][T11800] fuse: Unknown parameter '' [ 747.881059][T11800] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1621'. [ 747.881096][T11800] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1621'. [ 747.881139][T11800] netlink: 'syz.3.1621': attribute type 6 has an invalid length. [ 747.881153][T11800] netlink: 'syz.3.1621': attribute type 5 has an invalid length. [ 747.881165][T11800] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1621'. [ 748.385625][ T5700] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 748.515634][ T5606] Bluetooth: hci5: command 0x1003 tx timeout [ 748.517860][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 748.955597][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 749.039415][ T5700] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 749.256865][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.256909][ T5700] usb 3-1: Product: syz [ 749.256959][ T5700] usb 3-1: Manufacturer: syz [ 749.256979][ T5700] usb 3-1: SerialNumber: syz [ 749.609465][ T5700] usb 3-1: config 0 descriptor?? [ 749.618748][ T5700] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 749.738021][T11820] random: crng reseeded on system resumption [ 749.773844][T11822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1627'. [ 751.004298][T11838] befs: (nbd4): unable to read superblock [ 751.889690][ T5700] gspca_sonixj: reg_r err -110 [ 751.889782][ T5700] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 751.939918][ T1215] usb 3-1: USB disconnect, device number 47 [ 752.152449][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 752.152486][ T31] audit: type=1400 audit(752.119:3605): avc: denied { unlink } for pid=11843 comm="syz.2.1634" name="#17" dev="tmpfs" ino=1759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 752.154382][ T31] audit: type=1400 audit(752.119:3606): avc: denied { mount } for pid=11843 comm="syz.2.1634" name="/" dev="overlay" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 752.299918][ T31] audit: type=1400 audit(752.269:3607): avc: denied { mmap_zero } for pid=11841 comm="syz.0.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 752.387462][ T31] audit: type=1400 audit(752.359:3608): avc: denied { ioctl } for pid=11845 comm="syz.4.1633" path="socket:[39675]" dev="sockfs" ino=39675 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 752.448888][T11842] IPVS: sh: FWM 3 0x00000003 - no destination available [ 752.541289][ T31] audit: type=1400 audit(752.469:3609): avc: denied { read } for pid=11845 comm="syz.4.1633" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 752.541498][ T31] audit: type=1400 audit(752.469:3610): avc: denied { open } for pid=11845 comm="syz.4.1633" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 752.541686][ T31] audit: type=1400 audit(752.479:3611): avc: denied { ioctl } for pid=11845 comm="syz.4.1633" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 752.678956][ T31] audit: type=1400 audit(752.639:3612): avc: denied { prog_load } for pid=11832 comm="syz.1.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 752.679104][ T31] audit: type=1400 audit(752.639:3613): avc: denied { bpf } for pid=11832 comm="syz.1.1630" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 752.679291][ T31] audit: type=1400 audit(752.639:3614): avc: denied { map_create } for pid=11832 comm="syz.1.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 753.637930][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 754.744601][T11862] IPVS: sh: FWM 3 0x00000003 - no destination available [ 755.004758][T11866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1638'. [ 755.142358][T11869] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 755.210380][ T9340] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 755.462215][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 755.516105][ T9340] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 755.563032][ T9340] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 755.563079][ T9340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.260148][ T9340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 756.260209][ T9340] usb 4-1: SerialNumber: syz [ 758.052933][T11879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1641'. [ 758.120991][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 758.127474][ T31] audit: type=1400 audit(758.089:3654): avc: denied { map_read map_write } for pid=11875 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 758.158987][ T9340] usb 4-1: can't set config #1, error -71 [ 758.205263][ T9340] usb 4-1: USB disconnect, device number 52 [ 758.589735][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'. [ 758.925835][T11885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11885 comm=syz.3.1643 [ 758.940242][ T5811] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 758.959940][ T31] audit: type=1400 audit(758.929:3655): avc: denied { write } for pid=11884 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 759.135740][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 759.142084][ T5811] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 759.142169][ T5811] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 759.817522][ T31] audit: type=1400 audit(759.339:3656): avc: denied { create } for pid=11886 comm="syz.4.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 759.817653][ T31] audit: type=1400 audit(759.389:3657): avc: denied { write } for pid=11886 comm="syz.4.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 759.817688][ T31] audit: type=1400 audit(759.389:3658): avc: denied { connect } for pid=11886 comm="syz.4.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 759.817724][ T31] audit: type=1400 audit(759.389:3659): avc: denied { name_connect } for pid=11886 comm="syz.4.1642" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 759.817766][ T31] audit: type=1400 audit(759.399:3660): avc: denied { shutdown } for pid=11886 comm="syz.4.1642" lport=54135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 759.975594][T10175] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 760.016816][ T31] audit: type=1400 audit(759.989:3661): avc: denied { mmap_zero } for pid=11888 comm="syz.1.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 760.037713][ T31] audit: type=1400 audit(760.009:3662): avc: denied { listen } for pid=11895 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 760.058934][ T31] audit: type=1400 audit(760.029:3663): avc: denied { accept } for pid=11895 comm="syz.0.1645" lport=56495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 760.079755][ T5811] usb 3-1: unable to read config index 0 descriptor/all [ 760.087134][ T5811] usb 3-1: can't read configurations, error -71 [ 760.106658][T11890] IPVS: sh: FWM 3 0x00000003 - no destination available [ 760.126238][T10175] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 760.129110][T10175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.129135][T10175] usb 4-1: Product: syz [ 760.129152][T10175] usb 4-1: Manufacturer: syz [ 760.129168][T10175] usb 4-1: SerialNumber: syz [ 760.166805][T10175] digi_acceleport 4-1:1.0: Digi 2 port USB adapter converter detected [ 760.187159][T10175] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 760.317449][T10175] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 760.332699][T10175] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 760.878941][ T93] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 760.910705][T10175] usb 4-1: USB disconnect, device number 53 [ 760.935258][T10175] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 760.944899][ T7313] Bluetooth: Error in BCSP hdr checksum [ 760.945766][T10175] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 760.965781][T10175] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 760.966902][T10175] digi_acceleport 4-1:1.0: device disconnected [ 761.048765][ T93] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 761.050928][ T93] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.050953][ T93] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.054670][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 761.054697][ T93] usb 2-1: SerialNumber: syz [ 761.317594][ T93] usb 2-1: 0:2 : does not exist [ 761.317707][ T93] usb 2-1: unit 5: unexpected type 0x0c [ 761.333881][T11905] netlink: 'syz.4.1646': attribute type 3 has an invalid length. [ 761.589916][ T93] usb 2-1: USB disconnect, device number 62 [ 762.333360][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.094579][ T5606] Bluetooth: hci5: command 0x1003 tx timeout [ 763.098559][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 763.126621][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 763.133108][ T31] audit: type=1400 audit(762.659:3677): avc: denied { allowed } for pid=11910 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 763.133254][ T31] audit: type=1400 audit(762.669:3678): avc: denied { create } for pid=11910 comm="syz.1.1649" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 763.312835][ T31] audit: type=1400 audit(763.279:3679): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 763.560712][ T31] audit: type=1400 audit(763.529:3680): avc: denied { create } for pid=11922 comm="syz.0.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 764.057208][ T31] audit: type=1400 audit(763.589:3681): avc: denied { read write } for pid=11917 comm="syz.2.1651" name="video9" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 764.080745][ T31] audit: type=1400 audit(763.589:3682): avc: denied { open } for pid=11917 comm="syz.2.1651" path="/dev/video9" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 764.107752][ T31] audit: type=1400 audit(764.079:3683): avc: denied { audit_write } for pid=11917 comm="syz.2.1651" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 764.352912][ T31] audit: type=1400 audit(764.319:3684): avc: denied { create } for pid=11922 comm="syz.0.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 764.360193][ T31] audit: type=1400 audit(764.329:3685): avc: denied { connect } for pid=11922 comm="syz.0.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 764.361689][ T31] audit: type=1400 audit(764.329:3686): avc: denied { shutdown } for pid=11922 comm="syz.0.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 764.476091][T11929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1654'. [ 765.052899][T11933] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 766.238991][T11925] 9p: Could not find request transport: fVآx0x0000000000000007 [ 766.629303][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 766.654901][T11943] netlink: 'syz.1.1656': attribute type 3 has an invalid length. [ 766.810401][T11942] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1655'. [ 767.868371][T11945] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1659'. [ 767.879178][T11945] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 768.031163][T11957] syz_tun: entered allmulticast mode [ 768.073473][T11957] dvmrp6: entered allmulticast mode [ 768.107530][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 768.620689][T11964] kvm: pic: non byte write [ 768.902281][T11951] syz_tun: left allmulticast mode [ 769.114486][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 769.114525][ T31] audit: type=1400 audit(769.079:3705): avc: denied { write } for pid=11969 comm="syz.3.1663" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 769.145632][ T31] audit: type=1400 audit(769.109:3706): avc: denied { open } for pid=11969 comm="syz.3.1663" path="/dev/usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 769.805778][ T43] Bluetooth: Error in BCSP hdr checksum [ 769.910446][ T31] audit: type=1400 audit(769.879:3707): avc: denied { read write } for pid=11979 comm="syz.3.1665" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 769.934118][ T31] audit: type=1400 audit(769.879:3708): avc: denied { open } for pid=11979 comm="syz.3.1665" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 769.934179][ T31] audit: type=1400 audit(769.879:3709): avc: denied { ioctl } for pid=11979 comm="syz.3.1665" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 769.934222][ T31] audit: type=1400 audit(769.879:3710): avc: denied { create } for pid=11979 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 770.274491][T11984] befs: (nbd3): unable to read superblock [ 771.057927][T11990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1667'. [ 771.141007][T11993] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1668'. [ 771.184026][T11991] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 771.205723][ T31] audit: type=1326 audit(771.169:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.2.1668" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91f0b9e0d9 code=0x0 [ 771.246160][T11996] IPVS: sh: FWM 3 0x00000003 - no destination available [ 771.479532][T11974] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 771.943483][T11995] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 771.999700][ T31] audit: type=1400 audit(771.969:3712): avc: denied { setopt } for pid=11999 comm="syz.1.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 772.303301][T12006] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 772.315198][ T31] audit: type=1326 audit(772.279:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.3.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdab79e0d9 code=0x0 [ 773.441525][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'. [ 774.514582][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 774.522997][T12028] syz_tun: entered allmulticast mode [ 774.539047][T12027] netlink: 'syz.4.1675': attribute type 3 has an invalid length. [ 774.789235][T12028] dvmrp6: entered allmulticast mode [ 775.363281][T12025] syz_tun: left allmulticast mode [ 776.475926][T12045] syz_tun: entered allmulticast mode [ 776.502554][T12047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1680'. [ 776.617235][T12036] syz_tun: left allmulticast mode [ 776.859690][T12049] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 777.722475][T12052] netlink: Unknown conntrack attr (0) [ 777.722510][T12052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.782445][ T31] audit: type=1400 audit(777.749:3714): avc: denied { read write } for pid=12051 comm="syz.1.1681" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 777.808665][ T31] audit: type=1400 audit(777.779:3715): avc: denied { open } for pid=12051 comm="syz.1.1681" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 777.832859][T12055] fuse: Bad value for 'fd' [ 778.047309][ T31] audit: type=1400 audit(778.019:3716): avc: denied { create } for pid=12057 comm="syz.3.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 778.055228][ T31] audit: type=1400 audit(778.019:3717): avc: denied { setopt } for pid=12057 comm="syz.3.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 778.055422][ T31] audit: type=1400 audit(778.019:3718): avc: denied { setopt } for pid=12057 comm="syz.3.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 778.205597][ T986] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 778.355632][T12033] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 778.603488][ T986] usb 3-1: Using ep0 maxpacket: 8 [ 778.612214][ T986] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 778.676148][ T986] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 778.676216][ T986] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 778.676241][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 778.676270][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 778.811137][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.811178][ T986] usb 3-1: Product: syz [ 778.811207][ T986] usb 3-1: Manufacturer: syz [ 778.811227][ T986] usb 3-1: SerialNumber: syz [ 779.096647][ T986] usb 3-1: config 0 descriptor?? [ 779.102052][T12062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 779.157571][ T31] audit: type=1400 audit(779.129:3719): avc: denied { append } for pid=12071 comm="syz.1.1686" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 779.158039][ T31] audit: type=1400 audit(779.129:3720): avc: denied { open } for pid=12071 comm="syz.1.1686" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 779.158653][T12072] random: crng reseeded on system resumption [ 779.186060][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 779.480148][ T31] audit: type=1400 audit(779.449:3721): avc: denied { ioctl } for pid=12056 comm="syz.2.1684" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=40549 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 779.770000][ T31] audit: type=1400 audit(779.739:3722): avc: denied { getopt } for pid=12056 comm="syz.2.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 780.074048][ T31] audit: type=1400 audit(780.039:3723): avc: denied { read } for pid=12085 comm="syz.3.1688" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 780.165209][ T986] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 780.169413][ T986] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input50 [ 780.204747][T12086] loop2: detected capacity change from 0 to 2640 [ 780.958063][ T6226] buffer_io_error: 25 callbacks suppressed [ 780.964166][ T6226] Buffer I/O error on dev loop2, logical block 0, async page read [ 780.984634][ T6226] Buffer I/O error on dev loop2, logical block 0, async page read [ 781.004336][ T6226] Buffer I/O error on dev loop2, logical block 0, async page read [ 781.016872][ T6226] Buffer I/O error on dev loop2, logical block 0, async page read [ 781.027234][ T6226] Buffer I/O error on dev loop2, logical block 0, async page read [ 781.332329][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1690'. [ 781.397244][T12098] befs: (nbd4): unable to read superblock [ 781.762751][T12101] syz_tun: entered allmulticast mode [ 781.903999][T12103] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1691'. [ 782.200380][T12099] syz_tun: left allmulticast mode [ 783.238097][ C1] powermate: config urb returned -71 [ 783.238352][ C1] powermate: config urb returned -71 [ 783.238580][ C1] powermate: config urb returned -71 [ 783.239030][ T986] usb 3-1: USB disconnect, device number 50 [ 783.239149][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 783.984110][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 783.984789][ T31] audit: type=1400 audit(783.949:3736): avc: denied { read write } for pid=12126 comm="syz.2.1698" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 783.984943][ T31] audit: type=1400 audit(783.949:3737): avc: denied { open } for pid=12126 comm="syz.2.1698" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 784.098284][T12120] IPVS: sh: FWM 3 0x00000003 - no destination available [ 784.343118][T12131] syz_tun: entered allmulticast mode [ 784.412547][T12134] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1698'. [ 784.445863][ T986] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 784.451230][T12131] dvmrp6: entered allmulticast mode [ 784.561009][T12124] syz_tun: left allmulticast mode [ 784.597259][ T986] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 784.638924][ T986] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 784.649621][ T986] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.688166][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 784.696872][ T986] usb 4-1: SerialNumber: syz [ 785.398523][ T986] usb 4-1: 0:2 : does not exist [ 785.404964][ T986] usb 4-1: unit 5 not found! [ 785.641432][T12108] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 785.924956][ T986] usb 4-1: USB disconnect, device number 54 [ 786.485017][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.809238][T12147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1703'. [ 786.888968][T12148] befs: (nbd1): unable to read superblock [ 787.496641][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1704'. [ 787.578217][T12156] befs: (nbd2): unable to read superblock [ 787.590510][ T31] audit: type=1400 audit(787.549:3738): avc: denied { mounton } for pid=12150 comm="syz.2.1704" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 788.045598][T12154] netlink: 'syz.3.1705': attribute type 3 has an invalid length. [ 788.126702][T12161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1706'. [ 788.207725][T12162] befs: (nbd0): unable to read superblock [ 788.852271][ T31] audit: type=1400 audit(788.819:3739): avc: denied { bind } for pid=12158 comm="syz.4.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 788.852332][ T31] audit: type=1400 audit(788.819:3740): avc: denied { name_bind } for pid=12158 comm="syz.4.1707" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 788.852386][ T31] audit: type=1400 audit(788.819:3741): avc: denied { node_bind } for pid=12158 comm="syz.4.1707" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 789.056147][ T31] audit: type=1400 audit(789.009:3742): avc: denied { ioctl } for pid=12158 comm="syz.4.1707" path="socket:[40746]" dev="sockfs" ino=40746 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 791.685971][ T31] audit: type=1400 audit(791.379:3743): avc: denied { create } for pid=12164 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 791.686019][ T31] audit: type=1400 audit(791.379:3744): avc: denied { write } for pid=12164 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 791.799145][ T31] audit: type=1400 audit(791.769:3745): avc: denied { read write } for pid=5600 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.799355][ T31] audit: type=1400 audit(791.769:3746): avc: denied { open } for pid=5600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.799560][ T31] audit: type=1400 audit(791.769:3747): avc: denied { ioctl } for pid=5600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.899719][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 791.908878][T12180] netlink: 'syz.1.1712': attribute type 5 has an invalid length. [ 791.917015][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1712'. [ 792.005303][ T31] audit: type=1400 audit(791.969:3748): avc: denied { map_create } for pid=12179 comm="syz.1.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 792.025303][ T31] audit: type=1400 audit(791.969:3749): avc: denied { perfmon } for pid=12179 comm="syz.1.1712" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 792.556494][ T31] audit: type=1400 audit(792.019:3750): avc: denied { execmem } for pid=12178 comm="syz.3.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 792.556945][ T31] audit: type=1400 audit(792.469:3751): avc: denied { create } for pid=12172 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 793.084591][T12190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1714'. [ 793.222614][T12192] syz_tun: entered allmulticast mode [ 793.756318][T12195] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 793.774453][T12192] dvmrp6: entered allmulticast mode [ 793.880877][T12187] syz_tun: left allmulticast mode [ 794.255835][T10175] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 794.366107][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 794.366181][ T31] audit: type=1400 audit(794.299:3786): avc: denied { create } for pid=12204 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 794.366222][ T31] audit: type=1400 audit(794.309:3787): avc: denied { write } for pid=12204 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 794.584567][T10175] usb 2-1: Using ep0 maxpacket: 16 [ 794.631500][ T31] audit: type=1400 audit(794.509:3788): avc: denied { mmap_zero } for pid=12204 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 794.682525][T12207] IPVS: sh: FWM 3 0x00000003 - no destination available [ 794.682701][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 794.845857][T12173] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 795.290772][T10175] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 796.015756][ T9340] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 796.601100][T10175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.601154][T10175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 796.601203][T10175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 796.601230][T10175] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 796.643362][T12209] syz_tun: entered allmulticast mode [ 796.662152][ T9340] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 796.666426][ T9340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.666459][ T9340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.683294][ T9340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 796.683331][ T9340] usb 3-1: SerialNumber: syz [ 796.742063][T10175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 796.742095][T10175] usb 2-1: SerialNumber: syz [ 796.794843][T12209] syz_tun: left allmulticast mode [ 796.816543][ T31] audit: type=1400 audit(796.779:3789): avc: denied { read write } for pid=12211 comm="syz.3.1719" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 796.818900][ T31] audit: type=1400 audit(796.789:3790): avc: denied { open } for pid=12211 comm="syz.3.1719" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 796.823597][ T31] audit: type=1400 audit(796.789:3791): avc: denied { ioctl } for pid=12211 comm="syz.3.1719" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 796.973561][T12202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 796.973975][T12202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 797.262695][T10175] hub 2-1:1.0: bad descriptor, ignoring hub [ 797.262746][T10175] hub 2-1:1.0: probe with driver hub failed with error -5 [ 797.584420][T12214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1719'. [ 797.899916][T10175] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 797.938287][T10175] usb 2-1: USB disconnect, device number 63 [ 797.994384][ T31] audit: type=1400 audit(797.959:3792): avc: denied { create } for pid=12215 comm="syz.4.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 798.061006][T12219] lo: entered promiscuous mode [ 798.066281][T12219] tunl0: entered promiscuous mode [ 798.071549][T12219] gre0: entered promiscuous mode [ 798.076760][T12219] gretap0: entered promiscuous mode [ 798.082161][T12219] erspan0: entered promiscuous mode [ 798.088267][T12219] ip_vti0: entered promiscuous mode [ 798.093697][T12219] ip6_vti0: entered promiscuous mode [ 798.099431][T12219] sit0: entered promiscuous mode [ 798.104566][T12219] ip6tnl0: entered promiscuous mode [ 798.110520][T12219] ip6gre0: entered promiscuous mode [ 798.116680][T12219] syz_tun: entered promiscuous mode [ 798.122189][T12219] ip6gretap0: entered promiscuous mode [ 798.130929][T12219] bridge0: entered promiscuous mode [ 798.136609][T12219] vcan0: entered promiscuous mode [ 798.141985][T12219] bond0: entered promiscuous mode [ 798.147499][T12219] bond_slave_0: entered promiscuous mode [ 798.154243][T12219] bond_slave_1: entered promiscuous mode [ 798.171003][T12219] team0: entered promiscuous mode [ 798.171049][T12219] team_slave_0: entered promiscuous mode [ 798.171284][T12219] team_slave_1: entered promiscuous mode [ 798.171596][T12219] dummy0: entered promiscuous mode [ 798.171759][T12219] nlmon0: entered promiscuous mode [ 798.171914][T12219] batadv0: entered promiscuous mode [ 798.172087][T12219] vxcan0: entered promiscuous mode [ 798.172266][T12219] vxcan1: entered promiscuous mode [ 798.269631][T12221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1720'. [ 798.345390][T12222] befs: (nbd4): unable to read superblock [ 798.385570][ T31] audit: type=1400 audit(798.309:3793): avc: denied { mounton } for pid=12215 comm="syz.4.1720" path="/syzcgroup/unified/syz4" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 798.814845][T12219] veth0: entered promiscuous mode [ 798.816061][T12219] veth1: entered promiscuous mode [ 798.816194][T12219] wg0: entered promiscuous mode [ 798.816316][T12219] wg1: entered promiscuous mode [ 798.816438][T12219] wg2: entered promiscuous mode [ 798.816562][T12219] veth0_to_bridge: entered promiscuous mode [ 798.816791][T12219] veth1_to_bridge: entered promiscuous mode [ 798.818216][T12219] veth0_to_bond: entered promiscuous mode [ 798.820008][T12219] veth1_to_bond: entered promiscuous mode [ 798.820342][T12219] veth0_to_team: entered promiscuous mode [ 798.820618][T12219] veth1_to_team: entered promiscuous mode [ 798.820861][T12219] veth0_to_batadv: entered promiscuous mode [ 798.820981][T12219] batadv_slave_0: entered promiscuous mode [ 798.821102][T12219] veth1_to_batadv: entered promiscuous mode [ 798.821228][T12219] batadv_slave_1: entered promiscuous mode [ 798.823680][T12219] xfrm0: entered promiscuous mode [ 798.823813][T12219] veth0_to_hsr: entered promiscuous mode [ 798.824047][T12219] veth1_to_hsr: entered promiscuous mode [ 798.824272][T12219] hsr0: entered promiscuous mode [ 798.824392][T12219] veth1_virt_wifi: entered promiscuous mode [ 798.824518][T12219] veth0_virt_wifi: entered promiscuous mode [ 798.891868][T12219] virt_wifi0: entered promiscuous mode [ 798.910201][T12219] : entered promiscuous mode [ 798.910538][T12219] vlan1: entered promiscuous mode [ 798.910776][T12219] macvlan0: entered promiscuous mode [ 798.910926][T12219] macvlan1: entered promiscuous mode [ 798.911056][T12219] ipvlan0: entered promiscuous mode [ 798.911180][T12219] ipvlan1: entered promiscuous mode [ 798.934986][T12219] macvtap0: entered promiscuous mode [ 798.935142][T12219] macsec0: entered promiscuous mode [ 798.935246][T12219] geneve0: entered promiscuous mode [ 798.935390][T12219] geneve1: entered promiscuous mode [ 798.935759][T12219] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 798.935873][T12219] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 798.935980][T12219] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 798.936081][T12219] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 798.936183][T12219] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 798.936309][T12219] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 798.941920][T12219] vlan2: entered promiscuous mode [ 798.966757][T12219] veth2: entered promiscuous mode [ 798.973435][T12219] veth3: entered promiscuous mode [ 799.111045][ T9340] usb 3-1: 0:2 : does not exist [ 799.111107][ T9340] usb 3-1: unit 5: unexpected type 0x0c [ 799.140233][T12219] bond2: entered promiscuous mode [ 799.140979][T12219] bridge1: entered promiscuous mode [ 799.141187][T12219] dvmrp6: entered promiscuous mode [ 799.177061][ T9340] usb 3-1: USB disconnect, device number 51 [ 799.226916][ T31] audit: type=1400 audit(799.199:3794): avc: denied { ioctl } for pid=12224 comm="syz.4.1723" path="socket:[40901]" dev="sockfs" ino=40901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 799.248440][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.323393][ T31] audit: type=1400 audit(799.289:3795): avc: denied { allowed } for pid=12227 comm="syz.2.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 799.329357][T12229] befs: (nbd3): unable to read superblock [ 799.387161][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 799.387206][ T31] audit: type=1400 audit(799.359:3797): avc: denied { setopt } for pid=12228 comm="syz.1.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 799.387250][ T31] audit: type=1400 audit(799.359:3798): avc: denied { bind } for pid=12228 comm="syz.1.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 799.387282][ T31] audit: type=1400 audit(799.359:3799): avc: denied { name_bind } for pid=12228 comm="syz.1.1725" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 799.387320][ T31] audit: type=1400 audit(799.359:3800): avc: denied { node_bind } for pid=12228 comm="syz.1.1725" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 799.390839][ T31] audit: type=1400 audit(799.359:3801): avc: denied { write } for pid=12228 comm="syz.1.1725" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 799.468191][ T31] audit: type=1400 audit(799.429:3802): avc: denied { create } for pid=12228 comm="syz.1.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 799.471290][ T31] audit: type=1400 audit(799.429:3803): avc: denied { ioctl } for pid=12228 comm="syz.1.1725" path="socket:[40913]" dev="sockfs" ino=40913 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 799.581582][ T31] audit: type=1400 audit(799.549:3804): avc: denied { create } for pid=12237 comm="syz.0.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 799.597017][ T31] audit: type=1400 audit(799.549:3805): avc: denied { ioctl } for pid=12237 comm="syz.0.1728" path="socket:[40918]" dev="sockfs" ino=40918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 799.737935][ T31] audit: type=1400 audit(799.709:3806): avc: denied { create } for pid=12243 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 800.029107][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 800.202485][T12258] can0: slcan on ttyS3. [ 800.817721][T12258] can0 (unregistered): slcan off ttyS3. [ 801.734322][T12313] IPVS: sh: FWM 3 0x00000003 - no destination available [ 801.997963][T12280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 801.998084][T12280] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 802.110130][T12332] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1764'. [ 802.264560][T12280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 802.264640][T12280] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 802.290046][T12280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 802.290125][T12280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 802.416712][T12280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 802.416790][T12280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 802.430972][T12280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 802.442420][T12280] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 803.387487][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1782'. [ 803.387528][T12371] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1782'. [ 803.475647][T12260] Bluetooth: hci0: command 0x0406 tx timeout [ 804.287122][T12260] Bluetooth: hci2: command 0x0406 tx timeout [ 804.355940][T12260] Bluetooth: hci1: command 0x0406 tx timeout [ 804.441150][T12260] Bluetooth: hci3: command 0x0406 tx timeout [ 804.516590][T12260] Bluetooth: hci4: command 0x0406 tx timeout [ 804.613545][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 804.613587][ T31] audit: type=1400 audit(804.579:3847): avc: denied { bind } for pid=12406 comm="syz.2.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 804.639401][ T31] audit: type=1400 audit(804.599:3848): avc: denied { read } for pid=12408 comm="syz.4.1799" path="socket:[43281]" dev="sockfs" ino=43281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 804.846754][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 804.939131][ T31] audit: type=1400 audit(804.909:3849): avc: denied { setopt } for pid=12421 comm="syz.3.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 804.959063][ T31] audit: type=1400 audit(804.929:3850): avc: denied { ioctl } for pid=12421 comm="syz.3.1804" path="socket:[42212]" dev="sockfs" ino=42212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 805.291899][T12430] Invalid ELF header magic: != ELF [ 805.355854][ T31] audit: type=1400 audit(805.259:3851): avc: denied { sys_module } for pid=12421 comm="syz.3.1804" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 805.356135][ T31] audit: type=1400 audit(805.259:3852): avc: denied { module_load } for pid=12421 comm="syz.3.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 805.559283][T12260] Bluetooth: hci0: command 0x0406 tx timeout [ 806.036727][ T31] audit: type=1400 audit(806.009:3853): avc: denied { create } for pid=12440 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 806.061761][ T31] audit: type=1400 audit(806.029:3854): avc: denied { setopt } for pid=12440 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 806.080951][ T31] audit: type=1400 audit(806.029:3855): avc: denied { bind } for pid=12440 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 806.111367][ T31] audit: type=1400 audit(806.079:3856): avc: denied { map } for pid=12440 comm="syz.0.1809" path="socket:[42228]" dev="sockfs" ino=42228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 806.355681][T12260] Bluetooth: hci2: command 0x0406 tx timeout [ 806.435804][T12260] Bluetooth: hci1: command 0x0406 tx timeout [ 806.516198][T12260] Bluetooth: hci3: command 0x0406 tx timeout [ 806.595705][T12260] Bluetooth: hci4: command 0x0406 tx timeout [ 808.596601][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.596672][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.751727][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 809.751771][ T31] audit: type=1400 audit(809.719:3867): avc: denied { read } for pid=12499 comm="syz.4.1832" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 809.929195][ T31] audit: type=1400 audit(809.889:3868): avc: denied { setopt } for pid=12503 comm="syz.2.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 809.960960][ T31] audit: type=1400 audit(809.909:3869): avc: denied { name_bind } for pid=12505 comm="syz.4.1836" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 809.967836][ T31] audit: type=1400 audit(809.929:3870): avc: denied { mounton } for pid=12507 comm="syz.3.1837" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 809.976224][T12508] tmpfs: Bad value for 'mpol' [ 810.430080][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1846'. [ 810.431005][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1846'. [ 811.087963][T12556] syzkaller0: entered promiscuous mode [ 811.088003][T12556] syzkaller0: entered allmulticast mode [ 811.198172][ T31] audit: type=1400 audit(811.169:3871): avc: denied { mount } for pid=12560 comm="syz.0.1861" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 811.222662][ T31] audit: type=1400 audit(811.189:3872): avc: denied { search } for pid=12560 comm="syz.0.1861" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 811.254033][ T31] audit: type=1400 audit(811.209:3873): avc: denied { search } for pid=12560 comm="syz.0.1861" name="usb_gadget" dev="configfs" ino=3061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 811.254100][ T31] audit: type=1400 audit(811.209:3874): avc: denied { search } for pid=12560 comm="syz.0.1861" name="g1" dev="configfs" ino=31028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 811.254160][ T31] audit: type=1400 audit(811.219:3875): avc: denied { write } for pid=12560 comm="syz.0.1861" name="UDC" dev="configfs" ino=43499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 811.254202][ T31] audit: type=1400 audit(811.219:3876): avc: denied { open } for pid=12560 comm="syz.0.1861" path="/366/config/usb_gadget/g1/UDC" dev="configfs" ino=43499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 811.276477][T12562] Config c/1 of g1 needs at least one function. [ 811.276829][T12562] udc usbip-vudc.0: failed to start g1: -22 [ 811.276855][T12562] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 811.401103][T12562] UDC core: g1: couldn't find an available UDC or it's busy [ 811.475082][T12565] lo: entered promiscuous mode [ 811.475269][T12565] tunl0: entered promiscuous mode [ 811.475411][T12565] gre0: entered promiscuous mode [ 811.476538][T12565] gretap0: entered promiscuous mode [ 811.476657][T12565] erspan0: entered promiscuous mode [ 811.476756][T12565] ip_vti0: entered promiscuous mode [ 811.477195][T12565] ip6_vti0: entered promiscuous mode [ 811.477295][T12565] sit0: entered promiscuous mode [ 811.477392][T12565] ip6tnl0: entered promiscuous mode [ 811.477488][T12565] ip6gre0: entered promiscuous mode [ 811.479392][T12565] ip6gretap0: entered promiscuous mode [ 811.479506][T12565] bridge0: entered promiscuous mode [ 811.480234][T12565] vcan0: entered promiscuous mode [ 811.480370][T12565] bond0: entered promiscuous mode [ 811.480387][T12565] bond_slave_0: entered promiscuous mode [ 811.480857][T12565] bond_slave_1: entered promiscuous mode [ 811.487465][T12565] team0: entered promiscuous mode [ 811.487483][T12565] team_slave_0: entered promiscuous mode [ 811.487626][T12565] team_slave_1: entered promiscuous mode [ 811.487870][T12565] dummy0: entered promiscuous mode [ 811.487999][T12565] nlmon0: entered promiscuous mode [ 811.488115][T12565] batadv0: entered promiscuous mode [ 811.489199][T12565] vxcan0: entered promiscuous mode [ 811.489749][T12565] vxcan1: entered promiscuous mode [ 811.489879][T12565] veth0: entered promiscuous mode [ 811.490002][T12565] veth1: entered promiscuous mode [ 811.490521][T12565] wg0: entered promiscuous mode [ 811.491696][T12565] wg1: entered promiscuous mode [ 811.491820][T12565] wg2: entered promiscuous mode [ 811.491937][T12565] veth0_to_bridge: entered promiscuous mode [ 811.492158][T12565] veth1_to_bridge: entered promiscuous mode [ 811.492368][T12565] veth0_to_bond: entered promiscuous mode [ 811.493792][T12565] veth1_to_bond: entered promiscuous mode [ 811.494035][T12565] veth0_to_team: entered promiscuous mode [ 811.494289][T12565] veth1_to_team: entered promiscuous mode [ 811.494518][T12565] veth0_to_batadv: entered promiscuous mode [ 811.494643][T12565] batadv_slave_0: entered promiscuous mode [ 811.494764][T12565] veth1_to_batadv: entered promiscuous mode [ 811.495393][T12565] batadv_slave_1: entered promiscuous mode [ 811.497113][T12565] xfrm0: entered promiscuous mode [ 811.497257][T12565] veth0_to_hsr: entered promiscuous mode [ 811.497490][T12565] veth1_to_hsr: entered promiscuous mode [ 811.499337][T12565] hsr0: entered promiscuous mode [ 811.499463][T12565] veth1_virt_wifi: entered promiscuous mode [ 811.499931][T12565] veth0_virt_wifi: entered promiscuous mode [ 811.500053][T12565] virt_wifi0: entered promiscuous mode [ 811.501620][T12565] vlan0: entered promiscuous mode [ 811.501871][T12565] vlan1: entered promiscuous mode [ 811.502131][T12565] macvlan0: entered promiscuous mode [ 811.502259][T12565] macvlan1: entered promiscuous mode [ 811.502381][T12565] ipvlan0: entered promiscuous mode [ 811.502505][T12565] ipvlan1: entered promiscuous mode [ 811.503858][T12565] macvtap0: entered promiscuous mode [ 811.503982][T12565] macsec0: entered promiscuous mode [ 811.504079][T12565] geneve0: entered promiscuous mode [ 811.504214][T12565] geneve1: entered promiscuous mode [ 811.504341][T12565] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 811.508125][T12565] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 811.508324][T12565] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 811.508431][T12565] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 811.508538][T12565] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 811.509771][T12565] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 811.509986][T12565] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 811.510113][T12565] gretap1: entered promiscuous mode [ 811.510227][T12565] mac80211_hwsim hwsim13 wlan3: entered promiscuous mode [ 811.510353][T12565] bridge1: entered promiscuous mode [ 811.511735][T12565] dvmrp6: entered promiscuous mode [ 813.647630][ T9340] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 813.669139][ T9340] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 813.912960][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1883'. [ 813.970967][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 813.998866][T12606] fido_id[12606]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 814.038907][T12613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.053974][T12617] bond3: Unable to set up delay as MII monitoring is disabled [ 815.014804][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 815.014844][ T31] audit: type=1400 audit(814.979:3882): avc: denied { bind } for pid=12657 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 815.083617][ T31] audit: type=1400 audit(815.049:3883): avc: denied { shutdown } for pid=12662 comm="syz.2.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 815.324976][ T31] audit: type=1400 audit(815.289:3884): avc: denied { map } for pid=12669 comm="syz.2.1911" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 815.427984][T12676] trusted_key: encrypted_key: insufficient parameters specified [ 816.422230][ T31] audit: type=1400 audit(816.389:3885): avc: denied { create } for pid=12692 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 816.611928][ T31] audit: type=1400 audit(816.579:3886): avc: denied { mount } for pid=12708 comm="syz.0.1926" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 816.616931][ T31] audit: type=1400 audit(816.589:3887): avc: denied { read } for pid=12708 comm="syz.0.1926" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 816.618552][ T31] audit: type=1400 audit(816.589:3888): avc: denied { open } for pid=12708 comm="syz.0.1926" path="/375/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 816.621052][T12709] device-mapper: ioctl: only supply one of name or uuid, cmd(17) [ 816.621121][ T31] audit: type=1400 audit(816.589:3889): avc: denied { ioctl } for pid=12708 comm="syz.0.1926" path="/375/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 816.729243][ T31] audit: type=1400 audit(816.699:3890): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 817.081005][T12724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'. [ 817.847694][T12734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1937'. [ 817.869369][T12734] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1937'. [ 817.882063][T12734] netlink: 'syz.2.1937': attribute type 6 has an invalid length. [ 817.882109][T12734] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1937'. [ 817.959175][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 818.221847][ T31] audit: type=1400 audit(818.189:3891): avc: denied { read } for pid=12747 comm="syz.3.1942" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 819.073296][T12781] syzkaller0: entered promiscuous mode [ 819.079817][T12781] syzkaller0: entered allmulticast mode [ 819.097058][T12781] tipc: Enabling of bearer rejected, failed to enable media [ 819.207273][T12750] Process accounting resumed [ 820.002719][T12818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.091256][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 820.091309][ T31] audit: type=1400 audit(820.059:3898): avc: denied { setopt } for pid=12839 comm="syz.0.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 820.492944][ T31] audit: type=1400 audit(820.459:3899): avc: denied { append } for pid=12856 comm="syz.2.1992" name="usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 820.512062][T12858] netlink: 'syz.2.1992': attribute type 3 has an invalid length. [ 821.010804][ T31] audit: type=1400 audit(820.979:3900): avc: denied { execute } for pid=12880 comm="syz.4.2003" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 821.348200][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 821.434378][ T31] audit: type=1400 audit(821.349:3901): avc: denied { ioctl } for pid=12880 comm="syz.4.2003" path="socket:[44567]" dev="sockfs" ino=44567 ioctlcmd=0x48e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 822.041897][ T32] INFO: task kworker/1:4:5615 blocked for more than 143 seconds. [ 822.041999][ T32] Tainted: G L syzkaller #0 [ 822.042212][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.042276][ T32] task:kworker/1:4 state:D stack:22304 pid:5615 tgid:5615 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 822.042414][ T32] Workqueue: events_freezable mmc_rescan [ 822.042510][ T32] Call Trace: [ 822.042546][ T32] [ 822.042725][ T32] __schedule+0x1259/0x6920 [ 822.043153][ T32] ? mark_held_locks+0x40/0x70 [ 822.043283][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 822.129681][ T32] ? __pfx___schedule+0x10/0x10 [ 822.129758][ T32] ? find_held_lock+0x2b/0x80 [ 822.129925][ T32] ? schedule+0x225/0x2c0 [ 822.130170][ T32] schedule+0xdd/0x2c0 [ 822.130303][ T32] schedule_timeout+0x1b2/0x280 [ 822.130434][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 822.130827][ T32] ? mark_held_locks+0x40/0x70 [ 822.131152][ T32] __wait_for_common+0x2e7/0x4c0 [ 822.140838][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 822.141161][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 822.141623][ T32] mmc_wait_for_req_done+0xcd/0x3d0 [ 822.141948][ T32] mmc_wait_for_req+0x207/0x2c0 [ 822.142208][ T32] mmc_wait_for_cmd+0x154/0x200 [ 822.142287][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 822.166991][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 822.167357][ T32] ? rpm_resume+0x7eb/0x1320 [ 822.167677][ T32] mmc_io_rw_direct_host+0x126/0x330 [ 822.167876][ T32] ? __pfx_mmc_io_rw_direct_host+0x10/0x10 [ 822.190346][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 822.190423][ T32] ? __pm_runtime_resume+0xc3/0x170 [ 822.190507][ T32] ? __mmc_claim_host+0x2e2/0x5f0 [ 822.190715][ T32] sdio_reset+0x92/0x240 [ 822.190862][ T32] ? __pfx_sdio_reset+0x10/0x10 [ 822.190967][ T32] ? mmc_sw_reset+0xa0/0xd0 [ 822.191025][ T32] ? __lock_acquire+0xe15/0x1ec0 [ 822.191097][ T32] ? __pfx_default_wake_function+0x10/0x10 [ 822.191275][ T32] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 822.191586][ T32] mmc_rescan+0xba9/0x11c0 [ 822.225559][ T32] process_one_work+0xac7/0x1b10 [ 822.226060][ T32] ? __pfx_process_one_work+0x10/0x10 [ 822.226516][ T32] ? __pfx_mmc_rescan+0x10/0x10 [ 822.246645][ T32] worker_thread+0x5ef/0xe50 [ 822.247064][ T32] ? __pfx_worker_thread+0x10/0x10 [ 822.247228][ T32] ? kthread+0x13a/0x450 [ 822.247298][ T32] ? __pfx_worker_thread+0x10/0x10 [ 822.247373][ T32] kthread+0x373/0x450 [ 822.247492][ T32] ? __pfx_kthread+0x10/0x10 [ 822.247597][ T32] ret_from_fork+0x730/0xd60 [ 822.247735][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 822.247927][ T32] ? __switch_to+0x800/0x10f0 [ 822.248087][ T32] ? __pfx_kthread+0x10/0x10 [ 822.256859][ T32] ret_from_fork_asm+0x1a/0x30 [ 822.270786][ T32] [ 822.270884][ T32] INFO: task kworker/0:4:5692 blocked for more than 143 seconds. [ 822.270963][ T32] Tainted: G L syzkaller #0 [ 822.270995][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.271017][ T32] task:kworker/0:4 state:D stack:21832 pid:5692 tgid:5692 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 822.271115][ T32] Workqueue: usb_hub_wq hub_event [ 822.271195][ T32] Call Trace: [ 822.271217][ T32] [ 822.271358][ T32] __schedule+0x1259/0x6920 [ 822.271666][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 822.302758][ T32] ? __pfx___schedule+0x10/0x10 [ 822.302817][ T32] ? find_held_lock+0x2b/0x80 [ 822.302933][ T32] ? schedule+0x225/0x2c0 [ 822.303279][ T32] schedule+0xdd/0x2c0 [ 822.303363][ T32] schedule_timeout+0x1b2/0x280 [ 822.303513][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 822.303928][ T32] ? mark_held_locks+0x40/0x70 [ 822.321440][ T32] __wait_for_common+0x2e7/0x4c0 [ 822.321549][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 822.321836][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 822.321941][ T32] ? find_held_lock+0x2b/0x80 [ 822.322020][ T32] ? __flush_work+0x928/0xcb0 [ 822.322105][ T32] ? __flush_work+0x928/0xcb0 [ 822.322337][ T32] ? __flush_work+0x4ca/0xcb0 [ 822.322473][ T32] __flush_work+0x7c7/0xcb0 [ 822.322584][ T32] ? __timer_delete+0xe1/0x1b0 [ 822.322713][ T32] ? __pfx___flush_work+0x10/0x10 [ 822.351727][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 822.352305][ T32] ? __pfx___might_resched+0x10/0x10 [ 822.352363][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 822.352459][ T32] ? usb_hcd_flush_endpoint+0x359/0x400 [ 822.352689][ T32] cancel_delayed_work_sync+0xd1/0xf0 [ 822.352793][ T32] mmc_stop_host+0xe9/0x400 [ 822.352953][ T32] mmc_remove_host+0x15/0x60 [ 822.353155][ T32] vub300_disconnect+0x12d/0x170 [ 822.365273][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 822.373952][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 822.374156][ T32] device_remove+0x12a/0x180 [ 822.374250][ T32] device_release_driver_internal+0x44e/0x620 [ 822.390765][ T32] bus_remove_device+0x2bc/0x560 [ 822.390898][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 822.390949][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 822.391367][ T32] device_del+0x376/0x9b0 [ 822.391532][ T32] ? __pfx_device_del+0x10/0x10 [ 822.391590][ T32] ? kobject_put+0xb9/0x640 [ 822.391971][ T32] usb_disable_device+0x367/0x810 [ 822.423419][ T32] usb_disconnect+0x2e2/0x9a0 [ 822.423896][ T32] hub_event+0x1bb1/0x4420 [ 822.424595][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 822.424766][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 822.444726][ T32] ? __pfx_hub_event+0x10/0x10 [ 822.444817][ T32] ? __lock_acquire+0x1120/0x1ec0 [ 822.445318][ T32] ? process_one_work+0x906/0x1b10 [ 822.445391][ T32] ? process_one_work+0x906/0x1b10 [ 822.445952][ T32] process_one_work+0xac7/0x1b10 [ 822.462704][ T32] ? __pfx_process_one_work+0x10/0x10 [ 822.463201][ T32] ? __pfx_hub_event+0x10/0x10 [ 822.463458][ T32] worker_thread+0x5ef/0xe50 [ 822.463837][ T32] ? __pfx_worker_thread+0x10/0x10 [ 822.492486][ T32] ? kthread+0x13a/0x450 [ 822.492550][ T32] ? __pfx_worker_thread+0x10/0x10 [ 822.492612][ T32] kthread+0x373/0x450 [ 822.492706][ T32] ? __pfx_kthread+0x10/0x10 [ 822.492915][ T32] ret_from_fork+0x730/0xd60 [ 822.493042][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 822.493170][ T32] ? __switch_to+0x800/0x10f0 [ 822.493298][ T32] ? __pfx_kthread+0x10/0x10 [ 822.493517][ T32] ret_from_fork_asm+0x1a/0x30 [ 822.520226][ T32] [ 822.520410][ T32] [ 822.520410][ T32] Showing all locks held in the system: [ 822.520446][ T32] locks held by kworker/0:0/9: 3, on CPU#0: [ 822.520476][ T32] #0: ffff88801c057140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.520670][ T32] #1: ffffc900000e7d08 (netdev_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.520770][ T32] #2: ffffffff90ccb480 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x71/0x880 [ 822.520879][ T32] locks held by kworker/0:1/10: 2, last CPU#0: [ 822.520904][ T32] #0: ffff88801c055d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.521060][ T32] #1: ffffc900000f7d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.521216][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 822.521245][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 822.521501][ T32] #1: ffffffff9bc59b78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 822.521602][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 822.521625][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 822.521753][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 822.521779][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.551594][ T32] #1: ffffc90000b37d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.551758][ T32] #2: ffff888078849258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 822.551939][ T32] locks held by kworker/u9:0/52: 2, on CPU#0: [ 822.551971][ T32] #0: ffff888027d21940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.552092][ T32] #1: ffffc90000bc7d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.552206][ T32] locks held by kworker/u8:4/71: 3, last CPU#0: [ 822.552229][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.552361][ T32] #1: ffffc9000201fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.552679][ T32] #2: ffff888036280258 (&devlink->lock_key ** replaying previous printk message ** [ 822.552679][ T32] #2: ffff888036280258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 822.552850][ T32] locks held by kworker/R-nbd3-/917: 2, on CPU#0: [ 822.552871][ T32] #0: ffff888027d8c940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.552980][ T32] #1: ffffc9000442fc68 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.553109][ T32] locks held by kworker/R-nbd5-/923: 2, on CPU#0: [ 822.581463][ T32] #0: ffff888027e87140 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.581607][ T32] #1: ffffc9000446fc68 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.581764][ T32] locks held by kworker/u8:10/1493: 3, on CPU#0: [ 822.581792][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.581993][ T32] #1: ffffc90005a77d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.582102][ T32] #2: ffffffff90ccb480 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 822.582291][ T32] locks held by syslogd/4951: 2, last CPU#0: [ 822.582317][ T32] #0: ffff888036201f70 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 822.582480][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 822.582656][ T32] locks held by getty/5356: 2, on CPU#1: [ 822.582687][ T32] #0: ffff888037aa30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 822.582809][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 822.582918][ T32] locks held by kworker/u9:2/5601: 2, on CPU#0: [ 822.582941][ T32] #0: ffff888027d21940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.602910][ T32] #1: ffffc90002f9fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.603172][ T32] locks held by kworker/u9:4/5606: 2, on CPU#1: [ 822.603196][ T32] #0: ffff888027d21940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.603323][ T32] #1: ffffc90002f2fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.603477][ T32] locks held by kworker/1:4/5615: 2, on CPU#1: [ 822.603503][ T32] #0: ffff88801c056140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.603669][ T32] #1: ffffc90002ecfd08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.620644][ T32] locks held by kworker/0:4/5692: 5, on CPU#0: [ 822.620673][ T32] #0: ffff88801faed940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.620827][ T32] #1: ffffc90003d4fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.620988][ T32] #2: ffff88802a5ed1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 822.635310][ T32] #3: ffff8880352a21d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 822.635423][ T32] #4: ffff8880378e81a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 822.636028][ T32] locks held by kworker/u8:14/7313: 3, last CPU#0: [ 822.636052][ T32] #0: ffff8880343de140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.636181][ T32] #1: ffffc90004ee7d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.636329][ T32] #2: ffff8880360111c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 822.636503][ T32] locks held by kworker/u8:16/7315: 3, last CPU#0: [ 822.636532][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.644545][ T32] #1: ffffc900047d7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.658102][ T32] #2: ffff88805586d258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 822.658311][ T32] locks held by kworker/u8:18/7317: 3, on CPU#0: [ 822.658333][ T32] #0: ffff888034210940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.658444][ T32] #1: ffffc90004ec7d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.658567][ T32] #2: ffffffff90ccb480 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 822.658707][ T32] locks held by kworker/0:5/10175: 6, last CPU#0: [ 822.658735][ T32] #0: ffff8880341c8540 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.658894][ T32] #1: ffffc900031cfd08 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.659079][ T32] #2: ffff88807969f530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x42/0xc10 [ 822.659216][ T32] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1b5/0xec0 [ 822.659325][ T32] #4: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x135/0xa60 [ 822.659494][ T32] #5: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: ipv6_chk_mcast_addr+0x38/0x9a0 [ 822.680393][ T32] locks held by kworker/u9:1/11966: 2, on CPU#0: [ 822.680435][ T32] #0: ffff888027d26940 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.680546][ T32] #1: ffffc90004e5fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.680664][ T32] locks held by kworker/u9:3/11974: 2, on CPU#0: [ 822.680688][ T32] #0: ffff888027d26940 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.680830][ T32] #1: ffffc90005047d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.681145][ T32] locks held by kworker/u9:5/11975: 2, on CPU#0: [ 822.681177][ T32] #0: ffff888027d26940 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.681303][ T32] #1: ffffc9000374fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.681419][ T32] locks held by kworker/u9:6/12033: 2, on CPU#0: [ 822.681443][ T32] #0: ffff888027d8c940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.681573][ T32] #1: ffffc90004d97d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.681722][ T32] locks held by kworker/u9:7/12042: 2, on CPU#0: [ 822.681749][ T32] #0: ffff888027daf940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.681918][ T32] #1: ffffc9000466fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.700349][ T32] locks held by kworker/u9:8/12044: 2, on CPU#1: [ 822.700382][ T32] #0: ffff888027daf940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.700565][ T32] #1: ffffc9000340fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.700673][ T32] locks held by kworker/u9:9/12053: 2, on CPU#1: [ 822.700696][ T32] #0: ffff888027daf940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.700824][ T32] #1: ffffc900033efd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.700970][ T32] locks held by kworker/u9:10/12054: 2, on CPU#0: [ 822.700998][ T32] #0: ffff888027d8c940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.701160][ T32] #1: ffffc900045ffd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.701338][ T32] locks held by kworker/u9:11/12107: 2, on CPU#1: [ 822.701370][ T32] #0: ffff888027e81940 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.701578][ T32] #1: ffffc9000338fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.701717][ T32] locks held by kworker/u9:12/12108: 2, on CPU#0: [ 822.701742][ T32] #0: ffff888027e81940 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.732816][ T32] #1: ffffc9000317fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.732987][ T32] locks held by kworker/u9:13/12128: 2, on CPU#0: [ 822.733015][ T32] #0: ffff888027e81940 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.733176][ T32] #1: ffffc900040c7d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.733355][ T32] locks held by kworker/u9:14/12137: 2, on CPU#0: [ 822.733387][ T32] #0: ffff888027e87140 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.733498][ T32] #1: ffffc90005237d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.733612][ T32] locks held by kworker/u9:15/12173: 2, on CPU#0: [ 822.733636][ T32] #0: ffff88802800c140 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.733769][ T32] #1: ffffc9000335fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.733923][ T32] locks held by kworker/u9:16/12186: 2, on CPU#0: [ 822.733952][ T32] #0: ffff888027e87140 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.734125][ T32] #1: ffffc90005267d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.754488][ T32] locks held by kworker/u9:17/12199: 2, on CPU#0: [ 822.754517][ T32] #0: ffff88802800c140 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.754668][ T32] #1: ffffc900032ffd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.754833][ T32] locks held by kworker/u9:18/12200: 2, on CPU#1: [ 822.754862][ T32] #0: ffff88802800c140 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.755046][ T32] #1: ffffc9000332fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.755145][ T32] locks held by kworker/u9:20/12260: 3, on CPU#1: [ 822.755167][ T32] #0: ffff88807d914140 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 822.755286][ T32] #1: ffffc90005347d08 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 822.755583][ T32] #2: ffff888079848ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 822.755710][ T32] locks held by syz.2.1997/12871: 1, last CPU#0: [ 822.755736][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 822.755878][ T32] locks held by syz.2.1997/12874: 1, last CPU#0: [ 822.755906][ T32] #0: ffffffff90ccb480 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 822.773451][ T32] locks held by syz.0.2000/12873: 2, last CPU#0: [ 822.773483][ T32] #0: ffff88807b5ce9b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 822.773634][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 822.773794][ T32] locks held by syz.4.2003/12880: 2, on CPU#1: [ 822.773825][ T32] #0: ffff888021b410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x80/0x2f0 [ 822.773967][ T32] #1: ffff888021b420a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xae/0x2f0 [ 822.774081][ T32] locks held by syz.1.2005/12883: 2, last CPU#0: [ 822.774103][ T32] #0: ffff88807ce7d038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 822.774230][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 822.774366][ T32] locks held by syz.3.2004/12886: 2, last CPU#0: [ 822.774394][ T32] #0: ffff88807da47678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 822.774561][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 822.774773][ T32] [ 822.774784][ T32] ============================================= [ 822.774784][ T32] [ 822.774811][ T32] NMI backtrace for cpu 0 [ 822.774834][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 822.774873][ T32] Tainted: [L]=SOFTLOCKUP [ 822.774888][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 822.774911][ T32] Call Trace: [ 822.774941][ T32] [ 822.774974][ T32] dump_stack_lvl+0x100/0x190 [ 822.775171][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 822.775377][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 822.775469][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 822.775596][ T32] sys_info+0x141/0x190 [ 822.775698][ T32] watchdog+0xcb1/0x1030 [ 822.776025][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 822.776100][ T32] ? __pfx_watchdog+0x10/0x10 [ 822.776223][ T32] ? __kthread_parkme+0x18f/0x230 [ 822.776505][ T32] ? kthread+0x13a/0x450 [ 822.776575][ T32] ? __pfx_watchdog+0x10/0x10 [ 822.776609][ T32] kthread+0x373/0x450 [ 822.776668][ T32] ? __pfx_kthread+0x10/0x10 [ 822.776804][ T32] ret_from_fork+0x730/0xd60 [ 822.776968][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 822.777171][ T32] ? __switch_to+0x800/0x10f0 [ 822.777247][ T32] ? __pfx_kthread+0x10/0x10 [ 822.777386][ T32] ret_from_fork_asm+0x1a/0x30 [ 822.777931][ T32] [ 822.778426][ T32] Sending NMI from CPU 0 to CPUs 1: [ 822.778473][ C1] NMI backtrace for cpu 1 [ 822.778497][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.778534][ C1] Tainted: [L]=SOFTLOCKUP [ 822.778552][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 822.778574][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 822.778635][ C1] Code: 22 5d fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 18 06 d0 fc eb a2 e8 a1 06 [ 822.778666][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 822.778706][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 822.778732][ C1] RDX: 00000000000003fd RSI: ffffffff85aeb380 RDI: ffffffff9bc59ba0 [ 822.778758][ C1] RBP: ffffffff9bc59b60 R08: 0000000000000001 R09: 000000000000001f [ 822.778784][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 822.778810][ C1] R13: 0000000000000020 R14: fffffbfff378b3c9 R15: dffffc0000000000 [ 822.778837][ C1] FS: 0000000000000000(0000) GS:ffff888123c6b000(0000) knlGS:0000000000000000 [ 822.778870][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.778898][ C1] CR2: 000000110c308b59 CR3: 0000000034a54000 CR4: 00000000003526f0 [ 822.778933][ C1] Call Trace: [ 822.778969][ C1] [ 822.779078][ C1] wait_for_lsr+0x13a/0x210 [ 822.779318][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 822.779536][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 822.779629][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 822.779822][ C1] serial8250_console_write+0xf46/0x1330 [ 822.780105][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 822.780198][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 822.780305][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 822.780740][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 822.780943][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 822.781053][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 822.781150][ C1] ? do_raw_spin_lock+0x100/0x260 [ 822.781502][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 822.781604][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 822.781876][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 822.781947][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 822.782300][ C1] nbcon_kthread_func+0x613/0x7d0 [ 822.782532][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 822.782883][ C1] ? __kthread_parkme+0x18f/0x230 [ 822.783063][ C1] ? kthread+0x13a/0x450 [ 822.783113][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 822.783170][ C1] kthread+0x373/0x450 [ 822.783258][ C1] ? __pfx_kthread+0x10/0x10 [ 822.783449][ C1] ret_from_fork+0x730/0xd60 [ 822.783601][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 822.783717][ C1] ? __switch_to+0x800/0x10f0 [ 822.783840][ C1] ? __pfx_kthread+0x10/0x10 [ 822.784054][ C1] ret_from_fork_asm+0x1a/0x30 [ 822.784612][ C1] [ 823.016412][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 824.551125][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 824.561806][ T32] Tainted: [L]=SOFTLOCKUP [ 824.566126][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 824.576173][ T32] Call Trace: [ 824.579455][ T32] [ 824.582391][ T32] dump_stack_lvl+0x100/0x190 [ 824.587201][ T32] vpanic+0x553/0x970 [ 824.591268][ T32] ? __pfx_vpanic+0x10/0x10 [ 824.596115][ T32] panic+0xd1/0xe0 [ 824.599921][ T32] ? __pfx_panic+0x10/0x10 [ 824.604579][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 824.610771][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 824.616945][ T32] ? watchdog.cold+0x1ec/0x234 [ 824.621885][ T32] watchdog.cold+0x1fd/0x234 [ 824.626723][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 824.632597][ T32] ? __pfx_watchdog+0x10/0x10 [ 824.637396][ T32] ? __kthread_parkme+0x18f/0x230 [ 824.642638][ T32] ? kthread+0x13a/0x450 [ 824.646890][ T32] ? __pfx_watchdog+0x10/0x10 [ 824.651572][ T32] kthread+0x373/0x450 [ 824.655687][ T32] ? __pfx_kthread+0x10/0x10 [ 824.660407][ T32] ret_from_fork+0x730/0xd60 [ 824.665156][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 824.670375][ T32] ? __switch_to+0x800/0x10f0 [ 824.675123][ T32] ? __pfx_kthread+0x10/0x10 [ 824.679850][ T32] ret_from_fork_asm+0x1a/0x30 [ 824.685120][ T32] [ 824.688374][ T32] Kernel Offset: disabled [ 824.692731][ T32] Rebooting in 86400 seconds..