last executing test programs: 34.591365053s ago: executing program 1 (id=3929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'wlan0\x00', 0x1000}) 30.427191531s ago: executing program 1 (id=3936): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 30.07606494s ago: executing program 1 (id=3937): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000240)=0xed9, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x1a, 0x800, 0x10001, 0x0) 29.398352015s ago: executing program 1 (id=3938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8086}, 0x40004) 29.124551835s ago: executing program 1 (id=3939): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xf}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000818) 27.914993558s ago: executing program 1 (id=3941): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 6.645474639s ago: executing program 0 (id=3949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 6.44675397s ago: executing program 0 (id=3950): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4}]}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x1000000, 0x8, 0x2b6}, {0x6, 0x7, 0x4e}, {0x3, 0x8, 0xd83}, {0x1, 0x1000, 0x5}, {0x1, 0x3, 0x2}, {0x7, 0xffff, 0x4}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61, 0x0, 0x60]}}, &(0x7f0000000f40)=""/4089, 0x8a, 0xff9, 0x8}, 0x28) 6.225299785s ago: executing program 0 (id=3951): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) 3.503122624s ago: executing program 0 (id=3952): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x54, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6730}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb34}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.471207198s ago: executing program 0 (id=3953): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e2, @local}, 0x10) 0s ago: executing program 0 (id=3954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) kernel console output (not intermixed with test programs): 590.544101][ T8780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1590.603928][ T8780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1590.614719][ T8780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1590.660703][ T8780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1590.682782][ T8780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1590.743616][ T8780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1590.749288][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 1591.448402][ T29] audit: type=1400 audit(1591.110:443): avc: denied { write } for pid=8853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1592.804171][ T29] audit: type=1400 audit(1592.470:444): avc: denied { write } for pid=8872 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.144433][ T8780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.220058][ T29] audit: type=1400 audit(1595.890:445): avc: denied { write } for pid=8884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1597.384479][ T29] audit: type=1400 audit(1597.060:446): avc: denied { ioctl } for pid=8898 comm="syz.0.1829" path="socket:[23277]" dev="sockfs" ino=23277 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1597.451732][ T29] audit: type=1400 audit(1597.120:447): avc: denied { write } for pid=8896 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1599.057384][ T29] audit: type=1400 audit(1598.730:448): avc: denied { write } for pid=8905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1599.942416][ T29] audit: type=1400 audit(1599.600:449): avc: denied { write } for pid=8911 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1601.309366][ T29] audit: type=1400 audit(1600.980:450): avc: denied { write } for pid=8919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1602.028790][ T29] audit: type=1400 audit(1601.700:451): avc: denied { write } for pid=8926 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1602.924635][ T29] audit: type=1400 audit(1602.600:452): avc: denied { write } for pid=8931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1603.835723][ T29] audit: type=1400 audit(1603.510:453): avc: denied { write } for pid=8938 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1606.980279][ T8780] veth0_vlan: entered promiscuous mode [ 1607.058305][ T8780] veth1_vlan: entered promiscuous mode [ 1607.405709][ T8780] veth0_macvtap: entered promiscuous mode [ 1607.449829][ T8780] veth1_macvtap: entered promiscuous mode [ 1607.762977][ T5231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.763907][ T5231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.765550][ T5231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.766242][ T5231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.662704][ T29] audit: type=1400 audit(1610.340:454): avc: denied { write } for pid=8976 comm="syz.1.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1611.992525][ T6188] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1612.315827][ T6188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1612.353236][ T6188] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1612.362045][ T6188] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.364294][ T6188] usb 1-1: config 63 has no interface number 0 [ 1612.366548][ T6188] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1612.419755][ T6188] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1612.428765][ T6188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.430752][ T6188] usb 1-1: Product: syz [ 1612.442211][ T6188] usb 1-1: Manufacturer: syz [ 1612.442611][ T6188] usb 1-1: SerialNumber: syz [ 1612.729986][ T6188] usb 1-1: USB disconnect, device number 118 [ 1613.242909][ T6188] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1613.438093][ T6188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1613.456176][ T6188] usb 1-1: not running at top speed; connect to a high speed hub [ 1613.475620][ T6188] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1613.476099][ T6188] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.476443][ T6188] usb 1-1: config 63 has no interface number 0 [ 1613.476681][ T6188] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1613.506429][ T6188] usb 1-1: string descriptor 0 read error: -22 [ 1613.507442][ T6188] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1613.507589][ T6188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.877014][ T8968] usb 1-1: USB disconnect, device number 119 [ 1614.259647][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1851'. [ 1615.823951][ T9001] fuse: Unknown parameter 'grou00000000000000000000' [ 1616.094490][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.096845][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.162046][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.334080][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.007389][ T9015] fuse: Unknown parameter 'grou00000000000000000000' [ 1625.403220][ T9017] syzkaller0: entered promiscuous mode [ 1625.405604][ T9017] syzkaller0: entered allmulticast mode [ 1626.686186][ T9024] fuse: Unknown parameter 'grou00000000000000000000' [ 1628.269316][ T9037] fuse: Unknown parameter 'group_i00000000000000000000' [ 1628.818286][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.825238][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.317578][ T9047] fuse: Unknown parameter 'group_i00000000000000000000' [ 1630.396882][ T9057] fuse: Unknown parameter 'group_i00000000000000000000' [ 1631.647705][ T9069] fuse: Unknown parameter 'group_id00000000000000000000' [ 1633.160413][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.165098][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.403555][ T9081] fuse: Unknown parameter 'group_id00000000000000000000' [ 1634.584841][ T29] audit: type=1400 audit(1634.260:455): avc: denied { read } for pid=9089 comm="syz.1.1894" name="usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1634.588231][ T29] audit: type=1400 audit(1634.260:456): avc: denied { open } for pid=9089 comm="syz.1.1894" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1634.823623][ T9092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.826570][ T9092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.068424][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.077297][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.892770][ T8968] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1643.101921][ T8968] usb 1-1: Using ep0 maxpacket: 16 [ 1643.132805][ T8968] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.135264][ T8968] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.138529][ T8968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1643.140076][ T8968] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1643.143145][ T8968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.159704][ T8968] usb 1-1: config 0 descriptor?? [ 1643.686387][ T8968] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0 [ 1643.701851][ T8968] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0 [ 1643.702587][ T8968] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0 [ 1643.702915][ T8968] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0 [ 1643.703265][ T8968] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0 [ 1643.722908][ T8968] hid-generic 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1643.954445][ T8968] usb 1-1: USB disconnect, device number 120 [ 1644.352701][ T29] audit: type=1400 audit(1644.020:457): avc: denied { create } for pid=9120 comm="syz.0.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1645.293752][ T29] audit: type=1400 audit(1644.930:458): avc: denied { mounton } for pid=9115 comm="syz.1.1905" path="/proc/89/task" dev="proc" ino=23572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1645.615443][ T9122] fido_id[9122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1646.763228][ T29] audit: type=1400 audit(1646.430:459): avc: denied { write } for pid=9130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1647.617554][ T29] audit: type=1400 audit(1647.290:460): avc: denied { write } for pid=9137 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.187397][ T9153] syzkaller0: entered promiscuous mode [ 1657.187913][ T9153] syzkaller0: entered allmulticast mode [ 1658.170440][ T9158] fuse: Unknown parameter 'user_id00000000000000000000' [ 1658.733400][ T8968] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1658.914164][ T8968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.914673][ T8968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.915108][ T8968] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1658.915316][ T8968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.938160][ T8968] usb 1-1: config 0 descriptor?? [ 1659.476796][ T8968] hid-generic 0003:256C:006D.0007: unknown main item tag 0x0 [ 1659.477510][ T8968] hid-generic 0003:256C:006D.0007: unknown main item tag 0x0 [ 1659.478148][ T8968] hid-generic 0003:256C:006D.0007: unknown main item tag 0x0 [ 1659.478456][ T8968] hid-generic 0003:256C:006D.0007: unknown main item tag 0x0 [ 1659.478775][ T8968] hid-generic 0003:256C:006D.0007: unknown main item tag 0x0 [ 1659.510183][ T8968] hid-generic 0003:256C:006D.0007: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1667.758946][ T9176] fuse: Bad value for 'fd' [ 1669.698329][ T6188] usb 1-1: USB disconnect, device number 121 [ 1670.036204][ T9183] binder: 9182:9183 tried to acquire reference to desc 0, got 1 instead [ 1670.055891][ T9183] binder: 9182:9183 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1670.058642][ T9183] binder: 9183 RLIMIT_NICE not set [ 1670.069895][ T9183] binder: undelivered transaction 40, put_user failed [ 1670.075212][ T9183] binder: 9182:9183 ioctl c0306201 20000680 returned -14 [ 1670.083996][ T6188] binder: undelivered TRANSACTION_COMPLETE [ 1671.536520][ T9195] fuse: Bad value for 'fd' [ 1674.027968][ T9211] fuse: Bad value for 'fd' [ 1688.992077][ T9232] fuse: Unknown parameter '0x0000000000000003' [ 1689.550734][ T29] audit: type=1400 audit(1689.220:461): avc: denied { execute } for pid=9235 comm="syz.1.1939" path="/dev/audio1" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1690.360075][ T9244] fuse: Unknown parameter '0x0000000000000003' [ 1692.357377][ T9251] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 1695.712458][ T5696] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1695.870278][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.870693][ T5696] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1695.871415][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.884364][ T5696] usb 1-1: config 0 descriptor?? [ 1697.113409][ T9258] fuse: Unknown parameter '0x0000000000000003' [ 1697.319002][ T9260] fuse: Invalid rootmode [ 1705.026223][ T29] audit: type=1400 audit(1704.700:462): avc: denied { mounton } for pid=9271 comm="syz.1.1951" path="/69/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1705.337677][ T9275] fuse: Unknown parameter '0x0000000000000003' [ 1706.394010][ T8968] usb 1-1: USB disconnect, device number 122 [ 1710.726155][ T29] audit: type=1400 audit(1710.400:463): avc: denied { setopt } for pid=9286 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1710.751541][ T29] audit: type=1400 audit(1710.420:464): avc: denied { read } for pid=9286 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1710.836843][ T29] audit: type=1400 audit(1710.510:465): avc: denied { write } for pid=9286 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1711.623158][ T9291] fuse: Unknown parameter '0x0000000000000003' [ 1718.198551][ T9307] fuse: Unknown parameter '0x0000000000000003' [ 1729.018705][ T9323] fuse: Unknown parameter 'fd0x0000000000000003' [ 1729.722730][ T9253] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1729.987063][ T9253] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1729.999850][ T9253] usb 1-1: not running at top speed; connect to a high speed hub [ 1730.025127][ T9253] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.027319][ T9253] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1730.030583][ T9253] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1730.076734][ T9253] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1730.079233][ T9253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.093458][ T9253] usb 1-1: Product: syz [ 1730.095050][ T9253] usb 1-1: Manufacturer: syz [ 1730.099555][ T9253] usb 1-1: SerialNumber: syz [ 1730.147199][ T9253] usb 1-1: config 0 descriptor?? [ 1730.316874][ T9253] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1730.547749][ T9253] usb 1-1: USB disconnect, device number 123 [ 1732.612810][ T9338] fuse: Unknown parameter 'fd0x0000000000000003' [ 1735.251979][ T9342] ALSA: mixer_oss: invalid OSS volume 'u' [ 1736.883020][ T9328] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1743.616746][ T9358] fuse: Unknown parameter 'fd0x0000000000000003' [ 1744.422731][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.447656][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.299213][ T9393] fuse: Unknown parameter 'group_i00000000000000000000' [ 1749.554759][ T9404] fuse: Unknown parameter 'group_i00000000000000000000' [ 1751.369232][ T9411] futex_wake_op: syz.1.2000 tries to shift op by 144; fix this program [ 1751.457141][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 1751.464663][ T9411] netlink: 'syz.1.2000': attribute type 2 has an invalid length. [ 1755.834742][ T9420] fuse: Unknown parameter 'group_i00000000000000000000' [ 1757.570243][ T9436] fuse: Unknown parameter 'group_id00000000000000000000' [ 1758.132737][ T23] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1758.292493][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1758.308496][ T23] usb 1-1: config 9 has an invalid interface number: 83 but max is 0 [ 1758.308946][ T23] usb 1-1: config 9 has no interface number 0 [ 1758.309319][ T23] usb 1-1: config 9 interface 83 has no altsetting 0 [ 1758.349377][ T23] usb 1-1: New USB device found, idVendor=1164, idProduct=0871, bcdDevice=b8.ed [ 1758.349889][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.350213][ T23] usb 1-1: Product: syz [ 1758.350392][ T23] usb 1-1: Manufacturer: syz [ 1758.350498][ T23] usb 1-1: SerialNumber: syz [ 1758.740084][ T23] usb 1-1: USB disconnect, device number 124 [ 1759.666709][ T9448] fuse: Unknown parameter 'group_id00000000000000000000' [ 1761.075730][ T9463] fuse: Unknown parameter 'group_id00000000000000000000' [ 1762.339721][ T9473] fuse: Bad value for 'user_id' [ 1762.346906][ T9473] fuse: Bad value for 'user_id' [ 1763.884510][ T9485] fuse: Bad value for 'user_id' [ 1763.892868][ T9485] fuse: Bad value for 'user_id' [ 1766.030701][ T9496] fuse: Bad value for 'user_id' [ 1766.031764][ T9496] fuse: Bad value for 'user_id' [ 1766.388709][ T9498] fuse: Bad value for 'fd' [ 1768.503951][ T9509] fuse: Bad value for 'fd' [ 1768.892430][ T9511] fuse: Bad value for 'fd' [ 1770.183431][ T9524] fuse: Bad value for 'fd' [ 1770.839532][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.853314][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.609046][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.614422][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.883174][ T5696] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1773.043453][ T5696] usb 1-1: device descriptor read/64, error -71 [ 1773.283512][ T5696] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1773.422711][ T5696] usb 1-1: device descriptor read/64, error -71 [ 1773.534584][ T5696] usb usb1-port1: attempt power cycle [ 1773.872436][ T5696] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1773.896040][ T5696] usb 1-1: device descriptor read/8, error -71 [ 1774.142968][ T5696] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1774.166731][ T5696] usb 1-1: device descriptor read/8, error -71 [ 1774.274867][ T5696] usb usb1-port1: unable to enumerate USB device [ 1786.059879][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.067837][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.390713][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.415746][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.562337][ T805] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1789.722489][ T805] usb 1-1: Using ep0 maxpacket: 8 [ 1789.758276][ T805] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1789.758497][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.758776][ T805] usb 1-1: Product: syz [ 1789.758883][ T805] usb 1-1: Manufacturer: syz [ 1789.759037][ T805] usb 1-1: SerialNumber: syz [ 1789.777673][ T805] usb 1-1: config 0 descriptor?? [ 1792.550034][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.555779][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.772108][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.778793][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.562474][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 1798.789981][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.800841][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.069067][ T9548] usb 1-1: USB disconnect, device number 3 [ 1800.932179][ T9548] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1801.062397][ T9548] usb 1-1: device descriptor read/64, error -71 [ 1801.302597][ T9548] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1801.484194][ T9548] usb 1-1: device descriptor read/64, error -71 [ 1801.602467][ T9548] usb usb1-port1: attempt power cycle [ 1801.952023][ T9548] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1801.976093][ T9548] usb 1-1: device descriptor read/8, error -71 [ 1802.213493][ T9548] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1802.305160][ T9548] usb 1-1: device descriptor read/8, error -71 [ 1802.413914][ T9548] usb usb1-port1: unable to enumerate USB device [ 1802.818816][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 1802.822010][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 1812.843301][ T3522] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1813.246271][ T3522] usb 1-1: Using ep0 maxpacket: 16 [ 1813.555053][ T3522] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.555674][ T3522] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1813.556012][ T3522] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1813.556257][ T3522] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1813.586739][ T3522] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1813.587237][ T3522] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1813.587639][ T3522] usb 1-1: Manufacturer: syz [ 1813.635535][ T3522] usb 1-1: config 0 descriptor?? [ 1814.504523][ T9669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.508081][ T9669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.485585][ T29] audit: type=1400 audit(1815.160:466): avc: denied { bind } for pid=9672 comm="syz.1.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1818.099317][ T9681] fuse: Unknown parameter 'use00000000000000000000' [ 1824.021649][ T805] usb 1-1: USB disconnect, device number 8 [ 1824.693963][ T9696] fuse: Unknown parameter 'use00000000000000000000' [ 1825.202611][ T52] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1825.382835][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 1825.482578][ T52] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1825.489008][ T52] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1825.490184][ T52] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1825.491829][ T52] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1825.492620][ T52] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1825.493598][ T52] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1825.494412][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.568989][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.585086][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.793694][ T9745] geneve2: entered promiscuous mode [ 1836.959720][ T9758] syzkaller0: entered promiscuous mode [ 1836.963211][ T9758] syzkaller0: entered allmulticast mode [ 1839.617191][ T3522] usb 1-1: USB disconnect, device number 9 [ 1840.542569][ T29] audit: type=1400 audit(1840.200:467): avc: denied { map } for pid=9772 comm="syz.1.2134" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1841.433182][ T9780] binder: 9779:9780 ioctl c0306201 20000080 returned -14 [ 1841.478777][ T9780] binder: 9779:9780 tried to acquire reference to desc 0, got 1 instead [ 1841.479553][ T9780] binder: 9779:9780 ioctl c0306201 200003c0 returned -14 [ 1841.493107][ T52] binder: release 9779:9780 transaction 46 out, still active [ 1841.494702][ T52] binder: undelivered TRANSACTION_COMPLETE [ 1841.524953][ T52] binder: send failed reply for transaction 46, target dead [ 1849.215184][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.218170][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.582993][ T9819] IPv6: NLM_F_CREATE should be specified when creating new route [ 1855.585327][ T9819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1855.585890][ T9819] IPv6: NLM_F_CREATE should be set when creating new route [ 1855.650602][ T9819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1855.653970][ T9819] IPv6: NLM_F_CREATE should be set when creating new route [ 1858.615853][ T29] audit: type=1400 audit(1858.280:468): avc: denied { block_suspend } for pid=9830 comm="syz.0.2152" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1859.726742][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.734062][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.678678][ T9859] syzkaller0: entered promiscuous mode [ 1866.679359][ T9859] syzkaller0: entered allmulticast mode [ 1866.757485][ T9859] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1875.172945][ T7732] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1875.349301][ T7732] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1875.349694][ T7732] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1875.387286][ T7732] usb 1-1: string descriptor 0 read error: -22 [ 1875.388080][ T7732] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 1875.388189][ T7732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.135366][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.136492][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.136933][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.137190][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.137430][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.137658][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.137911][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.138144][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.138367][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1877.138609][ T7732] hid-generic 0003:17EF:6047.0008: unknown main item tag 0x0 [ 1879.899529][ T7732] hid-generic 0003:17EF:6047.0008: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 1886.558948][ T3522] usb 1-1: USB disconnect, device number 10 [ 1887.503740][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 1892.960467][ T29] audit: type=1400 audit(1892.630:469): avc: denied { relabelfrom } for pid=9930 comm="syz.1.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1892.969174][ T29] audit: type=1400 audit(1892.640:470): avc: denied { relabelto } for pid=9930 comm="syz.1.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1897.823388][ T29] audit: type=1400 audit(1897.490:471): avc: denied { setopt } for pid=9960 comm="syz.1.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1898.805946][ T29] audit: type=1400 audit(1898.480:472): avc: denied { read } for pid=9968 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1899.211979][ T29] audit: type=1400 audit(1898.880:473): avc: denied { setcurrent } for pid=9970 comm="syz.0.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1899.736278][ T9975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2205'. [ 1899.759824][ T9975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2205'. [ 1900.226081][ T9977] xt_hashlimit: size too large, truncated to 1048576 [ 1900.235763][ T9977] xt_hashlimit: max too large, truncated to 1048576 [ 1909.826098][T10021] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1909.826098][T10021] The task syz.0.2221 (10021) triggered the difference, watch for misbehavior. [ 1914.634631][T10038] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2227'. [ 1919.932583][ T29] audit: type=1326 audit(1919.540:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.1.2244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b77b68 code=0x7ffc0000 [ 1919.937058][ T29] audit: type=1326 audit(1919.540:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.1.2244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b77b68 code=0x7ffc0000 [ 1919.945683][ T29] audit: type=1326 audit(1919.550:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.1.2244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b77b68 code=0x7ffc0000 [ 1919.965605][ T29] audit: type=1326 audit(1919.550:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.1.2244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff98b77b68 code=0x7ffc0000 [ 1919.977896][ T29] audit: type=1326 audit(1919.550:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.1.2244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b77b68 code=0x7ffc0000 [ 1919.993426][ T29] audit: type=1326 audit(1919.550:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.1.2244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b77b68 code=0x7ffc0000 [ 1920.003008][ T29] audit: type=1326 audit(1919.550:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.1.2244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff98b77b68 code=0x7ffc0000 [ 1920.016178][ T29] audit: type=1326 audit(1919.570:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.1.2244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff98b77b68 code=0x7ffc0000 [ 1922.639192][ T1023] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.639540][ T1023] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.639772][ T1023] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.639922][ T1023] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.183760][T10136] syzkaller0: entered promiscuous mode [ 1930.184212][T10136] syzkaller0: entered allmulticast mode [ 1933.977177][T10164] ªªªªªª: renamed from vlan0 [ 1934.615312][ T29] audit: type=1400 audit(1934.290:482): avc: denied { ioctl } for pid=10168 comm="syz.1.2282" path="socket:[26391]" dev="sockfs" ino=26391 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1934.840316][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'. [ 1935.286831][ T29] audit: type=1400 audit(1934.960:483): avc: denied { read } for pid=10171 comm="syz.1.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1937.114282][T10177] geneve2: entered promiscuous mode [ 1937.404846][T10182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.618819][T10182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.810529][T10182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.960403][T10182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.220090][ T40] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.267233][ T3723] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.313265][ T3723] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.347301][ T40] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.267919][T10204] syzkaller0: entered promiscuous mode [ 1940.268227][T10204] syzkaller0: entered allmulticast mode [ 1940.438955][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 1966.333027][T10298] futex_wake_op: syz.1.2328 tries to shift op by 144; fix this program [ 1974.020424][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1975.224066][ T29] audit: type=1400 audit(1974.890:484): avc: denied { map } for pid=10338 comm="syz.1.2346" path="socket:[27220]" dev="sockfs" ino=27220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1975.224730][ T29] audit: type=1400 audit(1974.890:485): avc: denied { read } for pid=10338 comm="syz.1.2346" path="socket:[27220]" dev="sockfs" ino=27220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1985.817950][ T29] audit: type=1400 audit(1985.490:486): avc: denied { write } for pid=10425 comm="syz.1.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1986.702707][ T29] audit: type=1400 audit(1986.370:487): avc: denied { compute_member } for pid=10434 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1995.480561][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 1996.159941][T10462] syzkaller0: entered promiscuous mode [ 1996.164959][T10462] syzkaller0: entered allmulticast mode [ 1996.187242][T10462] 0: reclassify loop, rule prio 0, protocol 800 [ 1997.783298][ T29] audit: type=1400 audit(1997.450:488): avc: denied { nlmsg_read } for pid=10476 comm="syz.0.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1997.788148][T10477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2404'. [ 2000.428126][ T29] audit: type=1400 audit(2000.100:489): avc: denied { bind } for pid=10500 comm="syz.1.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2007.928594][T10547] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2434'. [ 2007.932889][T10547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2007.933290][T10547] IPv6: NLM_F_CREATE should be set when creating new route [ 2007.933653][T10547] IPv6: NLM_F_CREATE should be set when creating new route [ 2011.010508][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 2011.016029][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 2012.288638][T10577] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2448'. [ 2016.467180][ T29] audit: type=1400 audit(2016.140:490): avc: denied { ioctl } for pid=10597 comm="syz.0.2457" path="socket:[28261]" dev="sockfs" ino=28261 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2016.674252][T10598] syzkaller0: entered promiscuous mode [ 2016.676223][T10598] syzkaller0: entered allmulticast mode [ 2017.734728][T10603] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 2017.735653][T10603] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 2017.742421][T10603] bond1: entered allmulticast mode [ 2018.346709][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 2022.590298][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'. [ 2026.709555][T10656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2032.423380][T10697] syzkaller0: entered promiscuous mode [ 2032.425318][T10697] syzkaller0: entered allmulticast mode [ 2032.456331][T10697] 0: reclassify loop, rule prio 0, protocol 800 [ 2032.736515][T10699] netlink: 'syz.0.2499': attribute type 1 has an invalid length. [ 2033.125284][T10699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2033.217243][T10699] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 2033.226805][ T3723] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2033.235531][T10699] netlink: 'syz.0.2499': attribute type 10 has an invalid length. [ 2033.236257][T10699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2499'. [ 2033.254667][T10699] vxcan0: entered promiscuous mode [ 2033.353650][ T40] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2036.386334][ T6862] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.387218][ T6862] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.387493][ T6862] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.387680][ T6862] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.584354][T10722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 2039.142778][ T29] audit: type=1400 audit(2038.810:491): avc: denied { connect } for pid=10736 comm="syz.1.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2047.633127][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'. [ 2051.833530][T10829] random: crng reseeded on system resumption [ 2054.194033][T10833] Restarting kernel threads ... [ 2054.200631][T10833] Done restarting kernel threads. [ 2054.223112][ T29] audit: type=1400 audit(2053.850:492): avc: denied { ioctl } for pid=10828 comm="syz.1.2550" path="/dev/snapshot" dev="devtmpfs" ino=85 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2059.577439][ T29] audit: type=1400 audit(2059.250:493): avc: denied { create } for pid=10860 comm="syz.0.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2059.619608][ T29] audit: type=1400 audit(2059.280:494): avc: denied { bind } for pid=10860 comm="syz.0.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2060.163138][ T29] audit: type=1400 audit(2059.830:495): avc: denied { create } for pid=10866 comm="syz.0.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2060.293719][ T29] audit: type=1400 audit(2059.950:496): avc: denied { recv } for pid=3371 comm="syz-executor" saddr=127.0.0.1 src=42008 daddr=127.0.0.1 dest=30002 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2060.547692][T10868] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2061.559298][T10884] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 2062.564398][T10896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10896 comm=syz.0.2577 [ 2062.595051][T10896] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 2062.686007][T10896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2062.708642][T10896] bond1: (slave dummy0): Removing an active aggregator [ 2062.716969][T10896] bond1: (slave dummy0): Releasing backup interface [ 2062.786282][T10896] bond2: (slave dummy0): making interface the new active one [ 2062.797092][T10896] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 2065.750005][ T29] audit: type=1400 audit(2065.420:497): avc: denied { execute } for pid=10918 comm="syz.1.2587" path="/403/memory.events" dev="tmpfs" ino=2096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2068.853017][T10943] netlink: 'syz.1.2598': attribute type 1 has an invalid length. [ 2070.426025][T10958] xt_hashlimit: size too large, truncated to 1048576 [ 2070.428217][T10958] xt_hashlimit: max too large, truncated to 1048576 [ 2072.452410][ T29] audit: type=1400 audit(2072.120:498): avc: denied { mounton } for pid=10975 comm="syz.1.2613" path="/427/file0" dev="tmpfs" ino=2219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2072.543537][ T29] audit: type=1400 audit(2072.220:499): avc: denied { create } for pid=10977 comm="syz.0.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2072.548490][ T29] audit: type=1400 audit(2072.220:500): avc: denied { write } for pid=10977 comm="syz.0.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2072.563508][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 2072.704565][T10978] veth3: entered allmulticast mode [ 2072.734425][T10978] bond3: (slave veth3): Enslaving as an active interface with an up link [ 2075.097625][ T29] audit: type=1400 audit(2074.770:501): avc: denied { view } for pid=11004 comm="syz.1.2624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2075.486364][T11011] futex_wake_op: syz.0.2627 tries to shift op by 144; fix this program [ 2076.364071][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'. [ 2076.365976][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'. [ 2077.419610][ T29] audit: type=1400 audit(2077.090:502): avc: denied { write } for pid=11028 comm="syz.0.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2078.400382][T11042] syzkaller0: entered promiscuous mode [ 2078.402604][T11042] syzkaller0: entered allmulticast mode [ 2079.623007][ T29] audit: type=1400 audit(2079.280:503): avc: denied { accept } for pid=11058 comm="syz.1.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2082.385254][T11082] batadv_slave_0: entered promiscuous mode [ 2082.396790][T11082] netlink: 'syz.0.2661': attribute type 3 has an invalid length. [ 2083.933819][T11092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2083.977542][T11092] vxcan0: left promiscuous mode [ 2084.230127][T11092] batadv_slave_0: left promiscuous mode [ 2084.279009][T11092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2084.279597][T11092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2084.298471][T11092] veth1_vlan: left promiscuous mode [ 2084.305353][T11092] veth0_vlan: left promiscuous mode [ 2084.308600][T11092] veth0_vlan: entered promiscuous mode [ 2084.318472][T11092] veth1_vlan: entered promiscuous mode [ 2084.336732][T11092] veth1_macvtap: left promiscuous mode [ 2084.341280][T11092] veth0_macvtap: left promiscuous mode [ 2084.349189][T11092] veth0_macvtap: entered promiscuous mode [ 2084.360343][T11092] veth1_macvtap: entered promiscuous mode [ 2084.397722][T11092] geneve2: left promiscuous mode [ 2084.417789][T11092] 8021q: adding VLAN 0 to HW filter on device eth0 [ 2084.428682][T11092] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2084.444489][T11092] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2084.455739][T11092] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2084.466288][T11092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2084.483334][T11092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2084.494400][ T5696] syz1: Port: 1 Link ACTIVE [ 2084.770705][ T5556] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.782410][ T5556] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.783081][ T5556] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.783395][ T5556] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.906442][T11112] netlink: 'syz.1.2672': attribute type 7 has an invalid length. [ 2085.906882][T11112] netlink: 'syz.1.2672': attribute type 5 has an invalid length. [ 2085.907240][T11112] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2672'. [ 2090.562348][T11102] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2091.220655][T11152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2091.264601][T11152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.099693][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2092.107411][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.683377][T11169] xt_hashlimit: size too large, truncated to 1048576 [ 2095.704626][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'. [ 2095.899577][ T29] audit: type=1400 audit(2095.570:504): avc: denied { mount } for pid=11192 comm="syz.0.2708" name="/" dev="hugetlbfs" ino=29541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2096.203357][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2709'. [ 2096.939076][T11205] batadv_slave_1: entered promiscuous mode [ 2096.948643][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2713'. [ 2097.058943][T11205] batadv_slave_1 (unregistering): left promiscuous mode [ 2098.610419][ T29] audit: type=1400 audit(2098.280:505): avc: denied { validate_trans } for pid=11219 comm="syz.1.2719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2098.851921][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2720'. [ 2099.756794][T11233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2725'. [ 2099.817253][ T29] audit: type=1400 audit(2099.490:506): avc: denied { listen } for pid=11232 comm="syz.1.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2099.819822][ T29] audit: type=1400 audit(2099.490:507): avc: denied { accept } for pid=11232 comm="syz.1.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2106.226500][T11283] syz_tun: entered allmulticast mode [ 2106.237188][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2748'. [ 2106.239586][T11282] syz_tun: left allmulticast mode [ 2107.309180][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2756'. [ 2110.812434][ T29] audit: type=1400 audit(2110.480:508): avc: denied { kexec_image_load } for pid=11335 comm="syz.1.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2111.158640][T11345] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2116.125273][T11381] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2792'. [ 2117.657772][T11397] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2798'. [ 2117.660002][T11392] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2798'. [ 2117.676489][T11392] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2798'. [ 2120.157345][T11425] geneve2: left promiscuous mode [ 2120.164266][T11425] bond1: left allmulticast mode [ 2120.188504][T11424] syzkaller0: entered promiscuous mode [ 2120.190678][T11424] syzkaller0: entered allmulticast mode [ 2121.107003][T11436] netlink: 344 bytes leftover after parsing attributes in process `syz.0.2817'. [ 2125.922705][T11430] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2127.139146][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 2128.097102][T11467] netlink: 'syz.0.2828': attribute type 1 has an invalid length. [ 2128.232611][T11467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2128.290422][T11467] bond4: (slave veth0_to_bond): making interface the new active one [ 2128.298844][T11467] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2128.346096][T11467] macvlan2: entered promiscuous mode [ 2128.346668][T11467] macvlan2: entered allmulticast mode [ 2128.349740][T11467] bond4: entered promiscuous mode [ 2128.350323][T11467] veth0_to_bond: entered promiscuous mode [ 2128.359162][T11467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2128.362826][T11467] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2128.364648][T11467] bond4: left promiscuous mode [ 2128.364758][T11467] veth0_to_bond: left promiscuous mode [ 2134.322162][T11473] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2135.155468][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156181][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156264][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156345][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156427][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156497][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156583][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156676][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156754][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.156827][T11503] tc action pedit offset must be on 32 bit boundaries [ 2135.157316][T11503] TC_ACT_REPEAT abuse ? [ 2135.365772][T11505] netlink: 'syz.1.2842': attribute type 83 has an invalid length. [ 2135.866929][T11509] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2137.546957][T11527] block nbd0: not configured, cannot reconfigure [ 2137.907396][T11531] macvlan0: entered promiscuous mode [ 2143.525592][T11575] netlink: 'syz.0.2870': attribute type 7 has an invalid length. [ 2143.527320][T11575] netlink: 'syz.0.2870': attribute type 5 has an invalid length. [ 2143.532346][T11575] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2870'. [ 2146.163651][T11591] netlink: 'syz.1.2876': attribute type 10 has an invalid length. [ 2148.670513][T11614] veth1_macvtap: left promiscuous mode [ 2148.679003][T11614] macsec0: entered promiscuous mode [ 2149.195772][T11616] syzkaller0: entered promiscuous mode [ 2149.197650][T11616] syzkaller0: entered allmulticast mode [ 2150.467073][T11623] syzkaller0: entered promiscuous mode [ 2150.467551][T11623] syzkaller0: entered allmulticast mode [ 2152.382254][ T29] audit: type=1400 audit(2152.050:509): avc: denied { read } for pid=11638 comm="syz.1.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2153.163351][T11647] syzkaller0: entered promiscuous mode [ 2153.164947][T11647] syzkaller0: entered allmulticast mode [ 2154.536677][T11653] syzkaller0: entered promiscuous mode [ 2154.538939][T11653] syzkaller0: entered allmulticast mode [ 2154.570333][T11653] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2155.496420][T11660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.506361][T11660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.679044][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.698282][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.747491][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.750428][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.809581][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.816652][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.029703][T11664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.037039][T11664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.067790][T11664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.083924][T11664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.392919][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.396247][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.416297][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.428537][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.468592][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.493162][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.513804][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.518529][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.762971][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.766151][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.010314][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.020486][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.163736][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.169242][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.380429][T11674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.386894][T11674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.626461][T11674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.630133][T11674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.973616][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.983089][ T9548] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2157.988410][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.292554][ T9548] usb 1-1: Using ep0 maxpacket: 32 [ 2158.310238][ T9548] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.333458][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.349949][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.394201][ T9548] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2158.394763][ T9548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.395258][ T9548] usb 1-1: Product: syz [ 2158.395391][ T9548] usb 1-1: Manufacturer: syz [ 2158.395563][ T9548] usb 1-1: SerialNumber: syz [ 2158.438849][ T9548] usb 1-1: config 0 descriptor?? [ 2158.498643][ T9548] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 2158.707824][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.720435][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.848072][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.855455][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.176824][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.180562][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.217617][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.220510][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.106352][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.108995][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.166894][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.169942][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.234179][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.237204][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.237435][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.268517][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.296454][ T9548] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 2161.299029][ T9548] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 2161.555023][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.556975][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.785750][T11687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.789213][T11687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.807883][ T805] usb 1-1: USB disconnect, device number 11 [ 2162.208314][T11687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.210491][T11687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.226448][T11687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.238970][T11687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.327374][T11687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.330282][T11687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.777034][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.787947][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.832346][ T9548] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2163.033084][ T9548] usb 1-1: Using ep0 maxpacket: 32 [ 2163.048151][ T9548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2163.050154][ T9548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2163.052539][ T9548] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2163.054476][ T9548] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2163.056127][ T9548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.084929][ T9548] usb 1-1: config 0 descriptor?? [ 2163.159422][T11693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.174465][T11693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.740109][ T9548] hid_parser_main: 4007 callbacks suppressed [ 2163.743208][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.744732][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.746194][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.747694][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.749157][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.752160][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.754212][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.755774][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.757321][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.758924][ T9548] hid-generic 0003:0458:5011.0009: unknown main item tag 0x0 [ 2163.926032][ T9548] hid-generic 0003:0458:5011.0009: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 2163.956600][ T9548] usb 1-1: USB disconnect, device number 12 [ 2164.468297][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.484584][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.527830][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.536952][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.595106][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.597986][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.650365][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.652060][ T805] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 2164.714404][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.762746][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.768751][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.783230][T11694] fido_id[11694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2164.929454][ T805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2164.929958][ T805] usb 1-1: config 0 has no interface number 0 [ 2164.930373][ T805] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2164.930506][ T805] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2164.930704][ T805] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2164.930927][ T805] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2164.940371][ T805] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 2164.940573][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.995313][ T805] usb 1-1: config 0 descriptor?? [ 2165.042708][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.048801][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.483117][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.509402][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.597420][ T805] hid-generic 0003:145F:0212.000A: hidraw0: USB HID v4.06 Device [HID 145f:0212] on usb-dummy_hcd.0-1/input1 [ 2166.674546][T11704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.683720][T11704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.912946][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.917598][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2167.337917][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2167.340583][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.266172][T11726] syzkaller0: entered promiscuous mode [ 2170.268247][T11726] syzkaller0: entered allmulticast mode [ 2175.628944][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.636250][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.647932][ T29] audit: type=1400 audit(2175.320:510): avc: denied { append } for pid=11747 comm="syz.1.2939" name="hidraw0" dev="devtmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2175.753177][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.756522][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.944782][ T5696] usb 1-1: USB disconnect, device number 13 [ 2180.302669][ T3439] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2180.617934][ T3439] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2180.620741][ T3439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.625341][ T3439] usb 1-1: Product: syz [ 2180.626902][ T3439] usb 1-1: Manufacturer: syz [ 2180.627977][ T3439] usb 1-1: SerialNumber: syz [ 2180.657283][ T3439] usb 1-1: config 0 descriptor?? [ 2181.199899][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.214783][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.240004][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.256547][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.514488][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.529387][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.260734][ T3439] usb 1-1: f81604_read: reg: 100f failed: -EPROTO [ 2182.280042][ T3439] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 2182.303147][ T3439] usb 1-1: USB disconnect, device number 14 [ 2182.465909][ T3439] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 2182.678425][ T3439] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 2184.616278][T11766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2184.646873][T11766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2184.713635][ T805] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2184.906651][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2184.908747][ T805] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2184.913446][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.946310][ T805] usb 1-1: config 0 descriptor?? [ 2185.186410][ T805] usbhid 1-1:0.0: can't add hid device: -71 [ 2185.192496][ T805] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2185.225405][ T805] usb 1-1: USB disconnect, device number 15 [ 2185.742723][ T805] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2185.930382][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 2185.991919][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.995424][ T805] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2185.999701][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.020357][ T805] usb 1-1: config 0 descriptor?? [ 2186.062902][ T805] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2186.080188][ T805] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2186.487813][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.510880][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2186.540407][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.559631][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2186.598055][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.620605][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2186.870749][ T5696] usb 1-1: USB disconnect, device number 16 [ 2186.918105][ T5696] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2187.266766][T11766] hsr_slave_0: entered promiscuous mode [ 2187.278989][T11766] hsr_slave_1: entered promiscuous mode [ 2187.286907][T11766] debugfs: 'hsr0' already exists in 'hsr' [ 2187.287334][T11766] Cannot create hsr debugfs directory [ 2187.762609][ T805] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2188.079846][ T805] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2188.082182][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.083810][ T805] usb 1-1: Product: syz [ 2188.084803][ T805] usb 1-1: Manufacturer: syz [ 2188.085819][ T805] usb 1-1: SerialNumber: syz [ 2188.110391][ T805] usb 1-1: config 0 descriptor?? [ 2188.636936][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.639834][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.724689][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.764308][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2189.039377][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2189.055861][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2189.306118][ T805] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 2189.307178][ T805] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 2189.308410][ T805] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 2189.336443][ T805] usb 1-1: USB disconnect, device number 17 [ 2189.518570][T11766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2189.566321][T11766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2189.579560][T11766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2189.654951][T11766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2189.668363][T11766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2189.715992][T11766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2189.724518][T11766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2189.802309][T11766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2190.191812][ T3522] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2190.393686][ T3522] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2190.404314][ T3522] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2190.406195][ T3522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.427065][ T3522] usb 1-1: config 0 descriptor?? [ 2190.674279][ T3522] usbhid 1-1:0.0: can't add hid device: -71 [ 2190.676541][ T3522] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2190.707321][ T3522] usb 1-1: USB disconnect, device number 18 [ 2191.277015][ T29] audit: type=1400 audit(2190.950:511): avc: denied { write } for pid=11840 comm="syz.0.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2192.145365][T11766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2193.514729][ T3522] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2193.900327][ T3522] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2193.904060][ T3522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.905821][ T3522] usb 1-1: Product: syz [ 2193.906936][ T3522] usb 1-1: Manufacturer: syz [ 2193.909224][ T3522] usb 1-1: SerialNumber: syz [ 2193.937739][ T3522] usb 1-1: config 0 descriptor?? [ 2194.183882][ T3522] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 2194.185486][ T3522] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 2194.187138][ T3522] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 2194.243282][ T3522] usb 1-1: USB disconnect, device number 19 [ 2196.662491][ T7732] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2197.000168][ T7732] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2197.000513][ T7732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.001250][ T7732] usb 1-1: Product: syz [ 2197.001361][ T7732] usb 1-1: Manufacturer: syz [ 2197.001483][ T7732] usb 1-1: SerialNumber: syz [ 2197.042389][ T7732] usb 1-1: config 0 descriptor?? [ 2197.358914][ T7732] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 2197.359432][ T7732] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 2197.359917][ T7732] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 2197.475040][ T7732] usb 1-1: USB disconnect, device number 20 [ 2201.676437][T11766] veth0_vlan: entered promiscuous mode [ 2201.858742][T11766] veth1_vlan: entered promiscuous mode [ 2202.166843][T11766] veth0_macvtap: entered promiscuous mode [ 2202.425257][T11919] syzkaller0: entered promiscuous mode [ 2202.425838][T11919] syzkaller0: entered allmulticast mode [ 2202.438319][T11766] veth1_macvtap: entered promiscuous mode [ 2203.666078][T11096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.666710][T11096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.667184][T11096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.667506][T11096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2204.076402][T11923] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2980'. [ 2204.134186][T11923] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2980'. [ 2205.313300][T11933] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2983'. [ 2205.323555][T11933] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2983'. [ 2205.328472][T11933] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2983'. [ 2210.219253][T11985] syzkaller0: entered promiscuous mode [ 2210.229973][T11985] syzkaller0: entered allmulticast mode [ 2211.387883][T11994] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3010'. [ 2211.634896][T11997] netlink: 'syz.0.3012': attribute type 21 has an invalid length. [ 2211.638937][T11997] netlink: 14516 bytes leftover after parsing attributes in process `syz.0.3012'. [ 2212.819557][T12011] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3018'. [ 2212.828412][T12011] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3018'. [ 2213.629817][T12017] tun0: tun_chr_ioctl cmd 35108 [ 2214.205833][T12024] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3024'. [ 2215.788181][T12041] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3032'. [ 2219.742160][ T805] syz1: Port: 1 Link DOWN [ 2220.780101][ T29] audit: type=1400 audit(2220.450:512): avc: denied { write } for pid=12085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2221.000485][T12095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3052'. [ 2221.360805][ T29] audit: type=1400 audit(2221.030:513): avc: denied { write } for pid=12097 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2225.338527][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2225.389831][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2226.623846][ T29] audit: type=1400 audit(2226.300:514): avc: denied { setopt } for pid=12143 comm="syz.1.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2227.723568][T12075] hsr_slave_0: entered promiscuous mode [ 2227.730488][T12075] hsr_slave_1: entered promiscuous mode [ 2227.742972][T12075] debugfs: 'hsr0' already exists in 'hsr' [ 2227.744965][T12075] Cannot create hsr debugfs directory [ 2227.909286][T12158] netlink: 'syz.1.3068': attribute type 25 has an invalid length. [ 2228.834786][T12075] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.344016][T12075] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.558922][T12075] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.762726][T12075] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.408148][T12075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2230.455027][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2230.464757][T12075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2230.496337][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2230.510231][T12075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2230.625764][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2230.635132][T12075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2230.658003][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2232.830650][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2237.710019][T12250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3100'. [ 2241.947642][T12075] veth0_vlan: entered promiscuous mode [ 2242.113246][T12075] veth1_vlan: entered promiscuous mode [ 2242.478140][T12075] veth0_macvtap: entered promiscuous mode [ 2242.573839][T12075] veth1_macvtap: entered promiscuous mode [ 2242.830476][ T6862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.836805][ T6862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.850226][ T6862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.862491][ T6862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.914339][T12335] syzkaller0: entered promiscuous mode [ 2247.922554][T12335] syzkaller0: entered allmulticast mode [ 2248.389942][T12341] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3130'. [ 2248.950724][ T805] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2249.202592][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 2249.243470][ T805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.247128][ T805] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2249.299205][ T805] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2249.300465][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.302788][ T805] usb 1-1: Product: syz [ 2249.303490][ T805] usb 1-1: Manufacturer: syz [ 2249.304197][ T805] usb 1-1: SerialNumber: syz [ 2249.314906][ T805] usb 1-1: config 0 descriptor?? [ 2252.014214][ T6862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2252.065552][ T6862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2252.115938][ T6862] bond0 (unregistering): Released all slaves [ 2252.190366][ T6862] bond1 (unregistering): Released all slaves [ 2252.462385][ T6862] hsr_slave_0: left promiscuous mode [ 2252.478656][ T6862] hsr_slave_1: left promiscuous mode [ 2257.556866][T12381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.559147][T12381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.832216][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.846967][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2259.633068][ T3439] usb 1-1: USB disconnect, device number 21 [ 2259.953589][T12399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.955297][T12399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.447544][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.450603][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.453482][ T3439] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2261.649149][ T3439] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.652512][ T3439] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2261.654744][ T3439] usb 1-1: config 2 interface 0 has no altsetting 0 [ 2261.690575][ T3439] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 2261.691836][ T3439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.692183][ T3439] usb 1-1: Product: syz [ 2261.692574][ T3439] usb 1-1: Manufacturer: syz [ 2261.692749][ T3439] usb 1-1: SerialNumber: syz [ 2262.036122][ T29] audit: type=1400 audit(2261.710:515): avc: denied { read } for pid=12419 comm="syz.1.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2262.053757][ T3439] ims_pcu 1-1:2.0: Zero length descriptor [ 2262.055667][ T3439] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 2262.062594][ T3439] usb 1-1: USB disconnect, device number 22 [ 2262.862459][ T52] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2263.032283][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 2263.075341][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.075669][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2263.075941][ T52] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2263.076062][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.133257][ T52] usb 1-1: config 0 descriptor?? [ 2263.660463][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2263.674479][ T52] hid_parser_main: 910 callbacks suppressed [ 2263.676045][ T52] hid-generic 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 2263.678069][ T52] hid-generic 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 2263.679880][ T52] hid-generic 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 2263.682281][ T52] hid-generic 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 2263.683724][ T52] hid-generic 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 2263.706401][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2263.712771][ T52] hid-generic 0003:04D8:00DD.000B: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2263.868349][T11098] usb 1-1: USB disconnect, device number 23 [ 2265.133456][T11098] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2265.259478][T12428] fido_id[12428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2265.422355][T11098] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2265.867379][T11098] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 2265.960249][T11098] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 2265.960733][T11098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.995782][T11098] usb 1-1: Product: syz [ 2265.999974][T11098] usb 1-1: Manufacturer: syz [ 2266.008406][T11098] usb 1-1: SerialNumber: syz [ 2266.299028][T11098] usb 1-1: BAAD HEADSET c_chmask mismatch [ 2266.420126][T11098] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2266.456846][T11098] usb 1-1: USB disconnect, device number 24 [ 2270.034072][T12438] syz.1.3165 (12438): drop_caches: 2 [ 2272.185803][T12396] udevd[12396]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2272.744976][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.769600][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.156641][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.173510][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.253622][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3173'. [ 2273.408656][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3174'. [ 2273.743002][ T7732] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2273.944659][ T7732] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2273.951773][ T7732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.979300][ T7732] usb 1-1: config 0 descriptor?? [ 2277.399239][T12468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2277.405814][T12468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2281.895172][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2281.899962][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.268042][ T7732] usb 1-1: USB disconnect, device number 25 [ 2285.812102][ T9548] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2285.989406][ T9548] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2285.993025][ T9548] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2285.994946][ T9548] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2285.996419][ T9548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.032481][T12526] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2286.055938][ T9548] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2286.299542][ T9548] usb 1-1: USB disconnect, device number 26 [ 2287.160190][T12533] udevd[12533]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2291.333706][T12554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12561 sclass=netlink_route_socket pid=12554 comm=syz.0.3207 [ 2293.242400][ T805] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 2293.519010][ T805] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2293.519531][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2293.519849][ T805] usb 1-1: Product: syz [ 2293.519952][ T805] usb 1-1: Manufacturer: syz [ 2293.520031][ T805] usb 1-1: SerialNumber: syz [ 2293.547094][ T805] usb 1-1: config 0 descriptor?? [ 2296.934822][T12567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12561 sclass=netlink_route_socket pid=12567 comm=syz.1.3212 [ 2303.877618][ T3439] usb 1-1: USB disconnect, device number 27 [ 2306.583531][T12590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12561 sclass=netlink_route_socket pid=12590 comm=syz.1.3217 [ 2306.886169][T12592] kernel profiling enabled (shift: 0) [ 2309.544932][ T6862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2309.644642][ T6862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2309.705759][ T6862] bond0 (unregistering): Released all slaves [ 2309.827082][ T6862] bond1 (unregistering): Released all slaves [ 2310.038862][ T6862] bond2 (unregistering): (slave dummy0): Releasing active interface [ 2310.119236][ T6862] bond2 (unregistering): Released all slaves [ 2310.411825][ T6862] bond3 (unregistering): (slave veth3): Releasing backup interface [ 2310.484181][ T6862] bond3 (unregistering): Released all slaves [ 2310.719064][ T6862] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 2310.779570][ T6862] bond4 (unregistering): Released all slaves [ 2310.956585][ T6862] bond5 (unregistering): Released all slaves [ 2311.343449][ T6862] hsr_slave_0: left promiscuous mode [ 2311.352470][ T6862] hsr_slave_1: left promiscuous mode [ 2311.384624][ T6862] veth0_macvtap: left promiscuous mode [ 2311.386829][ T6862] veth1_vlan: left promiscuous mode [ 2311.413240][ T6862] veth0_vlan: left promiscuous mode [ 2312.073771][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 2318.149265][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'. [ 2318.962688][ T3439] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2319.255737][ T3439] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2319.256213][ T3439] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2319.337328][ T3439] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2319.338139][ T3439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2319.338518][ T3439] usb 1-1: SerialNumber: syz [ 2319.749728][ T3439] usb 1-1: 0:2 : does not exist [ 2319.753448][ T3439] usb 1-1: unit 5: unexpected type 0x09 [ 2320.022775][ T3439] usb 1-1: USB disconnect, device number 28 [ 2321.374722][T12627] udevd[12627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2321.553910][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 2324.055221][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'. [ 2325.499578][T12672] misc userio: The device must be registered before sending interrupts [ 2326.157509][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'. [ 2327.222917][ T52] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2327.546404][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2327.550291][ T52] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2327.579257][ T52] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2327.582384][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.584000][ T52] usb 1-1: Product: syz [ 2327.585008][ T52] usb 1-1: Manufacturer: syz [ 2327.586050][ T52] usb 1-1: SerialNumber: syz [ 2327.608849][ T52] usb 1-1: config 0 descriptor?? [ 2340.827982][T12719] misc userio: No port type given on /dev/userio [ 2341.880074][ T9548] usb 1-1: USB disconnect, device number 29 [ 2343.723227][T11095] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2343.910088][T11095] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2343.913018][T11095] usb 1-1: config 0 has no interfaces? [ 2343.915767][T11095] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2343.916702][T11095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2343.930421][T11095] usb 1-1: config 0 descriptor?? [ 2344.484301][T12740] misc userio: No port type given on /dev/userio [ 2344.947256][ T29] audit: type=1400 audit(2344.620:516): avc: denied { bind } for pid=12745 comm="syz.1.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2344.949994][ T29] audit: type=1400 audit(2344.620:517): avc: denied { name_bind } for pid=12745 comm="syz.1.3269" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2344.958239][ T29] audit: type=1400 audit(2344.630:518): avc: denied { node_bind } for pid=12745 comm="syz.1.3269" saddr=172.30.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 2345.092107][T12748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.112059][T12748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2345.614477][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.619773][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2351.115704][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2351.118119][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2354.736422][T12808] binder: 12807:12808 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 2354.740466][T12808] binder: 12807:12808 ioctl c0306201 20000640 returned -22 [ 2355.099732][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2355.109290][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2355.378078][T12814] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3295'. [ 2355.385383][T12814] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3295'. [ 2357.802809][T11095] usb 1-1: USB disconnect, device number 30 [ 2358.422534][T11095] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2358.722408][T11095] usb 1-1: config index 0 descriptor too short (expected 65023, got 45) [ 2358.787796][T11095] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2358.789905][T11095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.792302][T11095] usb 1-1: Product: syz [ 2358.793312][T11095] usb 1-1: Manufacturer: syz [ 2358.795464][T11095] usb 1-1: SerialNumber: syz [ 2359.042472][T12834] misc userio: Invalid payload size [ 2359.280542][T11095] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2359.292030][T11095] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2360.841400][T11095] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2360.845064][T11095] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2360.848734][T11095] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2360.851797][T11095] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2360.856299][T11095] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2360.926793][T11095] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 2360.997696][T11095] usb 1-1: USB disconnect, device number 31 [ 2361.495784][T12848] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3308'. [ 2361.513756][T12848] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3308'. [ 2361.988991][T12855] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3312'. [ 2361.992626][T12855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3312'. [ 2366.120228][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3322'. [ 2366.285002][T12876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2366.343213][T12876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2366.403439][T12876] bond0 (unregistering): Released all slaves [ 2368.182932][T12894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.212801][T12894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2373.863470][ T805] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 2374.148463][ T805] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 2374.148751][ T805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2374.148930][ T805] usb 1-1: config 0 has no interface number 0 [ 2374.149077][ T805] usb 1-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2374.301741][ T805] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2374.303159][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.303333][ T805] usb 1-1: Product: syz [ 2374.303513][ T805] usb 1-1: Manufacturer: syz [ 2374.303680][ T805] usb 1-1: SerialNumber: syz [ 2374.345401][ T805] usb 1-1: config 0 descriptor?? [ 2374.407734][ T805] asix 1-1:0.251: probe with driver asix failed with error -22 [ 2375.532532][T12937] input: syz1 as /devices/virtual/input/input10 [ 2378.064374][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2378.067200][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2378.565791][T12950] vxcan0: tx address claim with different name [ 2382.122796][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2382.134853][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2382.382739][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2382.387218][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2384.588914][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'. [ 2384.634064][ T3439] usb 1-1: USB disconnect, device number 32 [ 2385.243882][ T3439] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2385.405268][T12985] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3363'. [ 2385.416440][T12985] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3363'. [ 2385.443813][ T3439] usb 1-1: Using ep0 maxpacket: 8 [ 2385.529031][ T3439] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2385.529319][ T3439] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2385.529508][ T3439] usb 1-1: config 0 has no interface number 0 [ 2385.529698][ T3439] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2385.529794][ T3439] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 2385.529966][ T3439] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2385.530024][ T3439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2385.567680][ T3439] usb 1-1: config 0 descriptor?? [ 2385.659243][ T3439] ldusb 1-1:0.55: Interrupt in endpoint not found [ 2385.796654][T12987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2385.799517][T12987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2385.864203][ T3439] usb 1-1: USB disconnect, device number 33 [ 2386.858239][ T7732] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 2386.878664][ T7732] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2387.372034][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'. [ 2389.692909][T11095] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 2389.872706][T11095] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 2389.873176][T11095] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2389.873489][T11095] usb 1-1: config 0 has no interface number 0 [ 2389.873758][T11095] usb 1-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2389.905177][T11095] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2389.905687][T11095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.906133][T11095] usb 1-1: Product: syz [ 2389.906315][T11095] usb 1-1: Manufacturer: syz [ 2389.906420][T11095] usb 1-1: SerialNumber: syz [ 2389.938177][T11095] usb 1-1: config 0 descriptor?? [ 2390.007346][T11095] asix 1-1:0.251: probe with driver asix failed with error -22 [ 2392.408671][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 2395.866479][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.870523][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2396.393614][T13036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2396.418407][T13036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.929349][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3384'. [ 2399.934283][T13048] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3384'. [ 2399.935019][T13048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3384'. [ 2400.270753][ T3439] usb 1-1: USB disconnect, device number 34 [ 2400.650241][T13058] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3388'. [ 2400.656337][T13058] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3388'. [ 2401.443588][ T3439] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 2401.657276][ T3439] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 2401.659939][ T3439] usb 1-1: config 0 has no interface number 0 [ 2401.662587][ T3439] usb 1-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2401.706935][ T3439] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2401.709940][ T3439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.712928][ T3439] usb 1-1: Product: syz [ 2401.714290][ T3439] usb 1-1: Manufacturer: syz [ 2401.715388][ T3439] usb 1-1: SerialNumber: syz [ 2401.743445][ T3439] usb 1-1: config 0 descriptor?? [ 2401.784217][ T3439] asix 1-1:0.251: probe with driver asix failed with error -22 [ 2402.075448][T13071] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3394'. [ 2402.086487][T13071] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3394'. [ 2406.105162][T13084] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3399'. [ 2406.113676][T13084] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3399'. [ 2406.295173][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2406.298237][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2408.113468][T13100] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3404'. [ 2408.118153][T13100] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3404'. [ 2412.054119][T11095] usb 1-1: USB disconnect, device number 35 [ 2413.453252][ T7732] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 2413.710589][ T7732] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 2413.711772][ T7732] usb 1-1: config 0 has no interface number 0 [ 2413.712210][ T7732] usb 1-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2413.820705][ T7732] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2413.822022][ T7732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.822398][ T7732] usb 1-1: Product: syz [ 2413.822576][ T7732] usb 1-1: Manufacturer: syz [ 2413.822753][ T7732] usb 1-1: SerialNumber: syz [ 2413.859492][ T7732] usb 1-1: config 0 descriptor?? [ 2413.926824][ T7732] asix 1-1:0.251: probe with driver asix failed with error -22 [ 2424.282209][T11095] usb 1-1: USB disconnect, device number 36 [ 2427.492944][T13201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2427.497348][T13201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2436.234869][T13223] ªªªªªª: renamed from vlan0 (while UP) [ 2452.802705][ T29] audit: type=1400 audit(2452.250:519): avc: denied { accept } for pid=13270 comm="syz.1.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2472.998568][ T29] audit: type=1400 audit(2472.570:520): avc: denied { setattr } for pid=13311 comm="syz.1.3474" name="secretmem" dev="secretmem" ino=38001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2482.329820][ T29] audit: type=1400 audit(2481.980:521): avc: denied { create } for pid=13327 comm="syz.0.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2505.515473][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3490'. [ 2508.147285][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3496'. [ 2509.638154][ T29] audit: type=1400 audit(2509.310:522): avc: denied { override_creds } for pid=13390 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2515.641540][ T29] audit: type=1400 audit(2515.310:523): avc: denied { map } for pid=13407 comm="syz.0.3504" path="socket:[38098]" dev="sockfs" ino=38098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2515.642228][ T29] audit: type=1400 audit(2515.310:524): avc: denied { accept } for pid=13407 comm="syz.0.3504" path="socket:[38098]" dev="sockfs" ino=38098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2516.150114][T13412] fuseblk: Bad value for 'fd' [ 2519.864917][T13425] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.3508'. [ 2529.958377][T13460] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 2529.959348][T13460] CPU: 1 UID: 0 PID: 13460 Comm: syz.1.3518 Tainted: G L syzkaller #0 PREEMPT [ 2529.959599][T13460] Tainted: [L]=SOFTLOCKUP [ 2529.959663][T13460] Hardware name: linux,dummy-virt (DT) [ 2529.959725][T13460] Call trace: [ 2529.959776][T13460] show_stack+0x18/0x24 (C) [ 2529.959945][T13460] dump_stack_lvl+0x7c/0xb0 [ 2529.960036][T13460] dump_stack+0x1c/0x28 [ 2529.960129][T13460] sysfs_warn_dup+0x80/0xa8 [ 2529.960220][T13460] sysfs_create_dir_ns+0x1fc/0x244 [ 2529.960311][T13460] kobject_add_internal+0x1ec/0x734 [ 2529.960414][T13460] kobject_add+0x128/0x1e8 [ 2529.960508][T13460] device_add+0x1e4/0x1394 [ 2529.960601][T13460] device_register+0x20/0x30 [ 2529.960687][T13460] tty_register_device_attr+0x328/0x698 [ 2529.960831][T13460] tty_register_device+0x18/0x24 [ 2529.960931][T13460] gsm_activate_mux+0xfc/0x220 [ 2529.961024][T13460] gsmld_ioctl+0xe30/0x1420 [ 2529.961111][T13460] tty_ioctl+0x210/0x1464 [ 2529.961203][T13460] __arm64_sys_ioctl+0x124/0x1a4 [ 2529.961295][T13460] invoke_syscall+0x74/0x240 [ 2529.961383][T13460] el0_svc_common.constprop.0+0xac/0x230 [ 2529.961469][T13460] do_el0_svc+0x40/0x58 [ 2529.961550][T13460] el0_svc+0x58/0x2a4 [ 2529.961640][T13460] el0t_64_sync_handler+0xa0/0xe4 [ 2529.961729][T13460] el0t_64_sync+0x198/0x19c [ 2530.085617][T13460] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 2540.342415][T13468] Injecting memory failure for pfn 0x68810 at process virtual address 0x20000000 [ 2540.776802][T13468] Memory failure: 0x68810: recovery action for clean LRU page: Recovered [ 2540.780733][T13468] Injecting memory failure for pfn 0x68980 at process virtual address 0x20010000 [ 2540.796906][T13468] Memory failure: 0x68980: recovery action for clean LRU page: Recovered [ 2540.797779][T13468] Injecting memory failure for pfn 0x6c520 at process virtual address 0x20020000 [ 2540.798832][T13468] Memory failure: 0x6c520: recovery action for clean LRU page: Recovered [ 2540.803513][T13468] Injecting memory failure for pfn 0x6d520 at process virtual address 0x20030000 [ 2540.804941][T13468] Memory failure: 0x6d520: recovery action for clean LRU page: Recovered [ 2540.805494][T13468] Injecting memory failure for pfn 0x70530 at process virtual address 0x20040000 [ 2540.806573][T13468] Memory failure: 0x70530: recovery action for clean LRU page: Recovered [ 2540.810179][T13468] Injecting memory failure for pfn 0x68d40 at process virtual address 0x20050000 [ 2540.812833][T13468] Memory failure: 0x68d40: recovery action for clean LRU page: Recovered [ 2540.813195][T13468] Injecting memory failure for pfn 0x60370 at process virtual address 0x20060000 [ 2540.815496][T13468] Memory failure: 0x60370: recovery action for clean LRU page: Recovered [ 2540.815746][T13468] Injecting memory failure for pfn 0x6f7e0 at process virtual address 0x20070000 [ 2540.817712][T13468] Memory failure: 0x6f7e0: recovery action for clean LRU page: Recovered [ 2540.817999][T13468] Injecting memory failure for pfn 0x651c0 at process virtual address 0x20080000 [ 2540.820223][T13468] Memory failure: 0x651c0: recovery action for clean LRU page: Recovered [ 2540.820517][T13468] Injecting memory failure for pfn 0x65d70 at process virtual address 0x20090000 [ 2540.824298][T13468] Memory failure: 0x65d70: recovery action for clean LRU page: Recovered [ 2540.824631][T13468] Injecting memory failure for pfn 0x6d5b0 at process virtual address 0x200a0000 [ 2540.827212][T13468] Memory failure: 0x6d5b0: Sending SIGBUS to syz.1.3519:13468 due to hardware memory corruption [ 2540.828233][T13468] Memory failure: 0x6d5b0: recovery action for unsplit thp: Failed [ 2543.882184][ T29] audit: type=1400 audit(2543.550:525): avc: denied { mounton } for pid=13483 comm="syz.1.3526" path="/378/file0" dev="tmpfs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2584.195662][T13629] binder: 13627:13629 ioctl 400c620e ffffffffffffffff returned -14 [ 2584.720575][T13635] ======================================================= [ 2584.720575][T13635] WARNING: The mand mount option has been deprecated and [ 2584.720575][T13635] and is ignored by this kernel. Remove the mand [ 2584.720575][T13635] option from the mount to silence this warning. [ 2584.720575][T13635] ======================================================= [ 2584.752546][ T29] audit: type=1400 audit(2584.410:526): avc: denied { mount } for pid=13633 comm="syz.0.3588" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2591.308580][ T29] audit: type=1400 audit(2590.980:527): avc: denied { unmount } for pid=12075 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2593.475876][ T29] audit: type=1400 audit(2593.150:528): avc: denied { getopt } for pid=13673 comm="syz.1.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2597.385148][T13686] netlink: 'syz.0.3610': attribute type 5 has an invalid length. [ 2597.410504][T13686] ip6erspan0: entered promiscuous mode [ 2599.325201][T13690] GUP no longer grows the stack in syz.1.3611 (13690): 20005000-20008000 (20004000) [ 2599.327396][T13690] CPU: 0 UID: 0 PID: 13690 Comm: syz.1.3611 Tainted: G L syzkaller #0 PREEMPT [ 2599.327558][T13690] Tainted: [L]=SOFTLOCKUP [ 2599.327596][T13690] Hardware name: linux,dummy-virt (DT) [ 2599.327638][T13690] Call trace: [ 2599.327675][T13690] show_stack+0x18/0x24 (C) [ 2599.327801][T13690] dump_stack_lvl+0x7c/0xb0 [ 2599.327874][T13690] dump_stack+0x1c/0x28 [ 2599.327942][T13690] gup_vma_lookup+0x170/0x184 [ 2599.328031][T13690] __get_user_pages+0xe4/0x140c [ 2599.328111][T13690] __gup_longterm_locked+0x550/0xef0 [ 2599.328184][T13690] gup_fast_fallback+0x120c/0x18b0 [ 2599.328260][T13690] get_user_pages_fast+0xb0/0x100 [ 2599.328334][T13690] get_futex_key+0x3ec/0xf88 [ 2599.328413][T13690] futex_requeue+0x164/0x1ae4 [ 2599.328484][T13690] do_futex+0x21c/0x280 [ 2599.328549][T13690] __arm64_sys_futex+0x1e4/0x30c [ 2599.328616][T13690] invoke_syscall+0x74/0x240 [ 2599.328687][T13690] el0_svc_common.constprop.0+0xac/0x230 [ 2599.328758][T13690] do_el0_svc+0x40/0x58 [ 2599.328827][T13690] el0_svc+0x58/0x2a4 [ 2599.328905][T13690] el0t_64_sync_handler+0xa0/0xe4 [ 2599.329008][T13690] el0t_64_sync+0x198/0x19c [ 2602.674896][T13712] batadv_slave_1: entered promiscuous mode [ 2602.692236][T13712] batadv_slave_1: left promiscuous mode [ 2606.187786][ T29] audit: type=1400 audit(2605.860:529): avc: denied { append } for pid=13718 comm="syz.0.3621" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2610.652686][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 2621.302393][ T29] audit: type=1400 audit(2620.970:530): avc: denied { connect } for pid=13760 comm="syz.0.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2622.878447][T13768] netlink: 'syz.1.3638': attribute type 10 has an invalid length. [ 2622.893509][T13768] netlink: 'syz.1.3638': attribute type 10 has an invalid length. [ 2626.053634][T13774] netlink: 'syz.1.3639': attribute type 4 has an invalid length. [ 2630.939211][ T29] audit: type=1400 audit(2630.610:531): avc: denied { name_bind } for pid=13790 comm="syz.1.3646" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 2639.781976][T13815] netlink: 'syz.1.3651': attribute type 10 has an invalid length. [ 2646.221753][ T29] audit: type=1400 audit(2645.830:532): avc: denied { watch_sb watch_reads } for pid=13824 comm="syz.0.3657" path="/197/file0" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2648.419497][T13828] ptrace attach of "/syz-executor exec"[11766] was attempted by "/syz-executor exec"[13828] [ 2651.295202][T13846] binder: 13845:13846 tried to acquire reference to desc 0, got 1 instead [ 2651.307680][T11095] binder: release 13845:13846 transaction 53 out, still active [ 2651.308079][T11095] binder: undelivered TRANSACTION_COMPLETE [ 2651.329685][ T29] audit: type=1400 audit(2651.000:533): avc: denied { write } for pid=13840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2651.352338][T11095] binder: send failed reply for transaction 53, target dead [ 2652.140428][ T29] audit: type=1400 audit(2651.810:534): avc: denied { write } for pid=13850 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2653.063320][ T29] audit: type=1400 audit(2652.740:535): avc: denied { ioctl } for pid=13860 comm="syz.1.3669" path="socket:[38758]" dev="sockfs" ino=38758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2676.646403][T13938] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 2676.763335][T13938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2682.886355][T13948] pim6reg: entered allmulticast mode [ 2683.143140][T13948] pim6reg: left allmulticast mode [ 2688.824629][T13974] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 2689.044775][T13977] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3708'. [ 2689.737194][T13981] raw_sendmsg: syz.0.3710 forgot to set AF_INET. Fix it! [ 2691.491617][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3714'. [ 2692.963314][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 2693.197453][T14014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3722'. [ 2693.198035][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3722'. [ 2693.530598][T14018] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3724'. [ 2693.706591][T13187] bond0: (slave bond_slave_0): interface is now down [ 2693.712839][T13187] bond0: (slave bond_slave_1): interface is now down [ 2693.732290][T13187] bond0: (slave bond_slave_0): interface is now down [ 2693.732685][T13187] bond0: (slave bond_slave_1): interface is now down [ 2693.756051][T13187] bond0: now running without any active interface! [ 2701.362338][ T29] audit: type=1400 audit(2701.030:536): avc: denied { ioctl } for pid=14052 comm="syz.0.3738" path="socket:[39581]" dev="sockfs" ino=39581 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2712.025582][T14095] netlink: 'syz.1.3751': attribute type 28 has an invalid length. [ 2715.987233][T14110] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3756'. [ 2716.838907][ T29] audit: type=1400 audit(2716.510:537): avc: denied { getopt } for pid=14133 comm="syz.1.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2720.477851][T14159] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=14159 comm=syz.0.3771 [ 2722.006970][ T29] audit: type=1400 audit(2721.680:538): avc: denied { read } for pid=14160 comm="syz.0.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2728.954069][T14186] fuse: Bad value for 'fd' [ 2730.265132][T14195] gre0: entered promiscuous mode [ 2730.265737][T14195] gre0: entered allmulticast mode [ 2730.279303][T14195] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 2732.684657][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 2733.872878][T14218] netlink: 'syz.1.3794': attribute type 49 has an invalid length. [ 2734.026438][T14218] ip6gretap0: entered promiscuous mode [ 2734.031713][T14218] ip6gretap0: entered allmulticast mode [ 2737.826924][T14244] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3804'. [ 2738.937903][T14250] netlink: 'syz.1.3807': attribute type 3 has an invalid length. [ 2740.906292][T14265] IPv6: NLM_F_CREATE should be specified when creating new route [ 2741.265826][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 2741.630570][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 2747.685199][ T29] audit: type=1400 audit(2747.360:539): avc: denied { write } for pid=14293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2748.502081][T14301] fuse: Bad value for 'fd' [ 2748.685507][ T29] audit: type=1400 audit(2748.360:540): avc: denied { write } for pid=14299 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2749.790751][T14308] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3827'. [ 2752.408697][T14320] fuse: Bad value for 'fd' [ 2752.903547][T14324] syzkaller0: entered promiscuous mode [ 2752.904974][T14324] syzkaller0: entered allmulticast mode [ 2756.919273][T14337] geneve0: entered promiscuous mode [ 2756.943797][T14337] geneve0: left promiscuous mode [ 2757.585307][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3841'. [ 2757.585830][T14341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3841'. [ 2757.610598][T14341] vxlan0: entered promiscuous mode [ 2757.625008][T13193] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2757.625534][T13193] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2757.625808][T13193] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2757.625992][T13193] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2759.151655][ T29] audit: type=1400 audit(2758.820:541): avc: denied { ioctl } for pid=14350 comm="syz.1.3844" path="socket:[40507]" dev="sockfs" ino=40507 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2763.223590][T14381] syzkaller0: entered promiscuous mode [ 2763.224138][T14381] syzkaller0: entered allmulticast mode [ 2767.419042][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 2767.747539][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 2772.537031][T14454] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 2773.088681][T14459] netlink: 'syz.0.3878': attribute type 3 has an invalid length. [ 2773.609996][T14465] syzkaller0: entered promiscuous mode [ 2773.610345][T14465] syzkaller0: entered allmulticast mode [ 2776.184900][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3889'. [ 2779.229847][T14517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3898'. [ 2781.530327][T14527] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 2781.639095][T14527] bond1: entered promiscuous mode [ 2781.642667][T14527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2783.958740][T14547] syzkaller0: entered promiscuous mode [ 2783.959053][T14547] syzkaller0: entered allmulticast mode [ 2784.076285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.076902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.882375][T14554] fuse: Unknown parameter 'group_i00000000000000000000' [ 2785.109082][T14556] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3910'. [ 2786.023653][T14560] syzkaller0: entered promiscuous mode [ 2786.029465][T14560] syzkaller0: entered allmulticast mode [ 2786.350181][T14564] fuse: Unknown parameter 'group_i00000000000000000000' [ 2791.567420][T14596] fuse: Unknown parameter 'group_id00000000000000000000' [ 2791.895539][T14598] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2793.826312][T14606] fuse: Unknown parameter 'group_id00000000000000000000' [ 2800.557970][ T5231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2800.569706][ T5231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2800.863073][ T5231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2800.863650][ T5231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2801.304834][ T5231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2801.323962][ T5231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2801.846617][ T5231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2801.850096][ T5231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2805.776019][ T5231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2805.886115][ T5231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2805.943211][ T5231] bond0 (unregistering): Released all slaves [ 2805.979432][ T5231] bond1 (unregistering): Released all slaves [ 2806.268750][ T5231] hsr_slave_0: left promiscuous mode [ 2806.279508][ T5231] hsr_slave_1: left promiscuous mode [ 2806.313294][ T5231] veth1_macvtap: left promiscuous mode [ 2806.316041][ T5231] veth0_macvtap: left promiscuous mode [ 2806.328358][ T5231] veth1_vlan: left promiscuous mode [ 2806.337771][ T5231] veth0_vlan: left promiscuous mode [ 2811.092296][ T29] audit: type=1400 audit(2810.760:542): avc: denied { write } for pid=14679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2811.916950][ T29] audit: type=1400 audit(2811.590:543): avc: denied { write } for pid=14685 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2812.265506][ T3221] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2812.852605][ T29] audit: type=1400 audit(2812.510:544): avc: denied { write } for pid=14692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2814.313597][ T29] audit: type=1400 audit(2813.980:545): avc: denied { write } for pid=14697 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2816.196366][T14649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2816.279014][T14649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2816.703508][ T29] audit: type=1400 audit(2816.350:546): avc: denied { write } for pid=14701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2817.973244][ T29] audit: type=1400 audit(2817.640:547): avc: denied { write } for pid=14711 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2818.831406][ T29] audit: type=1400 audit(2818.500:548): avc: denied { write } for pid=14717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2819.289695][T14649] hsr_slave_0: entered promiscuous mode [ 2819.299738][T14649] hsr_slave_1: entered promiscuous mode [ 2819.400558][ T29] audit: type=1400 audit(2819.070:549): avc: denied { write } for pid=14723 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2819.989099][T14727] fuse: Unknown parameter 'grou00000000000000000000' [ 2821.969837][T14649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2822.018268][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2822.049544][T14649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2822.050495][ T29] audit: type=1400 audit(2821.720:550): avc: denied { write } for pid=14740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2822.097550][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2822.113144][T14649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2822.138743][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2822.155135][T14649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2822.204542][T14649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2822.764460][ T29] audit: type=1400 audit(2822.440:551): avc: denied { write } for pid=14751 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2824.382905][ T29] audit: type=1400 audit(2824.040:552): avc: denied { write } for pid=14756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2825.904140][T14649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2826.144258][ T29] audit: type=1400 audit(2825.800:553): avc: denied { write } for pid=14763 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2827.890072][ T29] audit: type=1400 audit(2827.550:554): avc: denied { write } for pid=14769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2828.093024][ T3439] ------------[ cut here ]------------ [ 2828.093894][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2828.095919][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2828.099388][ T3439] Modules linked in: [ 2828.100303][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT [ 2828.100957][ T3439] Tainted: [L]=SOFTLOCKUP [ 2828.101215][ T3439] Hardware name: linux,dummy-virt (DT) [ 2828.101753][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2828.102419][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2828.102896][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2828.103255][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2828.103653][ T3439] sp : ffff8000a26d7900 [ 2828.103960][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2828.104695][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2828.105237][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2828.105782][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2828.106377][ T3439] x17: 1ffff00010f39a12 x16: 00000000f1f1f1f1 x15: 00000000f3f3f3f3 [ 2828.106932][ T3439] x14: 0000000000000000 x13: 0000000000000001 x12: ffff7000144daeb7 [ 2828.107526][ T3439] x11: 1ffff000144daeb6 x10: ffff7000144daeb6 x9 : dfff800000000000 [ 2828.108080][ T3439] x8 : ffff8000a26d75b7 x7 : 0000000000000001 x6 : ffff7000144daeb6 [ 2828.108629][ T3439] x5 : 1ffff00010ef702e x4 : 1fffe00002efa001 x3 : dfff800000000000 [ 2828.109173][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2828.109839][ T3439] Call trace: [ 2828.110225][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2828.110638][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2828.110992][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2828.111329][ T3439] process_one_work+0x7c0/0x1ab0 [ 2828.111671][ T3439] worker_thread+0x42c/0xc90 [ 2828.111988][ T3439] kthread+0x2ec/0x384 [ 2828.112308][ T3439] ret_from_fork+0x10/0x20 [ 2828.112847][ T3439] irq event stamp: 0 [ 2828.113114][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2828.114089][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2828.114572][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2828.115002][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2828.116504][ T3439] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2828.593317][ T29] audit: type=1400 audit(2828.250:555): avc: denied { sys_module } for pid=14649 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2829.522244][ T3439] ------------[ cut here ]------------ [ 2829.522594][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2829.528536][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2829.529124][ T3439] Modules linked in: [ 2829.529587][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2829.530303][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2829.530619][ T3439] Hardware name: linux,dummy-virt (DT) [ 2829.531000][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2829.531428][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2829.531856][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2829.532225][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2829.532534][ T3439] sp : ffff8000a26d7900 [ 2829.532795][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2829.533272][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2829.533847][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2829.534371][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2829.535187][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2829.535822][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2829.536357][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2829.536848][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2829.537302][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2829.537810][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2829.538460][ T3439] Call trace: [ 2829.538722][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2829.539159][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2829.539542][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2829.539936][ T3439] process_one_work+0x7c0/0x1ab0 [ 2829.540329][ T3439] worker_thread+0x42c/0xc90 [ 2829.540689][ T3439] kthread+0x2ec/0x384 [ 2829.541030][ T3439] ret_from_fork+0x10/0x20 [ 2829.541378][ T3439] irq event stamp: 0 [ 2829.541649][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2829.542180][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2829.542706][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2829.543237][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2829.543645][ T3439] ---[ end trace 0000000000000000 ]--- [ 2829.683791][ T29] audit: type=1400 audit(2829.360:556): avc: denied { write } for pid=14775 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2831.202402][ T3439] ------------[ cut here ]------------ [ 2831.202907][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2831.221081][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2831.222222][ T3439] Modules linked in: [ 2831.222676][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2831.223306][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2831.223646][ T3439] Hardware name: linux,dummy-virt (DT) [ 2831.224068][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2831.224612][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2831.225101][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2831.225501][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2831.225899][ T3439] sp : ffff8000a26d7900 [ 2831.226163][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2831.226742][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2831.227334][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2831.227932][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2831.228627][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2831.229256][ T3439] x14: 1ffff00010ef76de x13: 0000000000000004 x12: ffff60000d7eccba [ 2831.229843][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2831.230444][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2831.231081][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2831.231709][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2831.232347][ T3439] Call trace: [ 2831.232638][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2831.233084][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2831.233499][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2831.233914][ T3439] process_one_work+0x7c0/0x1ab0 [ 2831.234287][ T3439] worker_thread+0x42c/0xc90 [ 2831.234705][ T3439] kthread+0x2ec/0x384 [ 2831.235164][ T3439] ret_from_fork+0x10/0x20 [ 2831.235597][ T3439] irq event stamp: 0 [ 2831.235884][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2831.236305][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2831.236861][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2831.237370][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2831.237821][ T3439] ---[ end trace 0000000000000000 ]--- [ 2832.322542][ T3439] ------------[ cut here ]------------ [ 2832.323064][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2832.343294][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2832.344352][ T3439] Modules linked in: [ 2832.344804][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2832.345425][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2832.345732][ T3439] Hardware name: linux,dummy-virt (DT) [ 2832.346106][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2832.346551][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2832.347022][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2832.347447][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2832.347834][ T3439] sp : ffff8000a26d7900 [ 2832.348147][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2832.348737][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2832.349331][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2832.350022][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2832.350630][ T3439] x17: ffff7fffe47ee000 x16: ffff80008dce0000 x15: ffff8000877bb6f0 [ 2832.351307][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2832.351941][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2832.352574][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2832.353242][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2832.353818][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2832.354459][ T3439] Call trace: [ 2832.354692][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2832.355087][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2832.355450][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2832.355862][ T3439] process_one_work+0x7c0/0x1ab0 [ 2832.356268][ T3439] worker_thread+0x42c/0xc90 [ 2832.356593][ T3439] kthread+0x2ec/0x384 [ 2832.356935][ T3439] ret_from_fork+0x10/0x20 [ 2832.357291][ T3439] irq event stamp: 0 [ 2832.357542][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2832.358103][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2832.358564][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2832.359044][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2832.359461][ T3439] ---[ end trace 0000000000000000 ]--- [ 2833.443772][ T3439] ------------[ cut here ]------------ [ 2833.444201][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2833.452542][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2833.453195][ T3439] Modules linked in: [ 2833.453595][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2833.454236][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2833.454609][ T3439] Hardware name: linux,dummy-virt (DT) [ 2833.454934][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2833.455395][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2833.455864][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2833.456318][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2833.456719][ T3439] sp : ffff8000a26d7900 [ 2833.457052][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2833.458081][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2833.458675][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2833.459264][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2833.459933][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2833.460505][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2833.461138][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2833.461744][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2833.462370][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2833.462960][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2833.463555][ T3439] Call trace: [ 2833.463816][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2833.464261][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2833.464693][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2833.465119][ T3439] process_one_work+0x7c0/0x1ab0 [ 2833.465503][ T3439] worker_thread+0x42c/0xc90 [ 2833.465980][ T3439] kthread+0x2ec/0x384 [ 2833.466329][ T3439] ret_from_fork+0x10/0x20 [ 2833.466704][ T3439] irq event stamp: 0 [ 2833.466968][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2833.467383][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2833.467866][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2833.468338][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2833.468772][ T3439] ---[ end trace 0000000000000000 ]--- [ 2834.562400][ T3439] ------------[ cut here ]------------ [ 2834.562794][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2834.576196][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2834.576866][ T3439] Modules linked in: [ 2834.577195][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2834.577538][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2834.577762][ T3439] Hardware name: linux,dummy-virt (DT) [ 2834.578022][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2834.578288][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2834.578615][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2834.578822][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2834.579042][ T3439] sp : ffff8000a26d7900 [ 2834.579360][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2834.579809][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2834.580316][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2834.580942][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2834.581517][ T3439] x17: 1ffff00010f39a12 x16: 1fffe00002fcd433 x15: ffff8000877bb6f0 [ 2834.581969][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2834.582479][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2834.582914][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2834.583333][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2834.583755][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2834.585488][ T3439] Call trace: [ 2834.586150][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2834.586678][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2834.587083][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2834.587396][ T3439] process_one_work+0x7c0/0x1ab0 [ 2834.587743][ T3439] worker_thread+0x42c/0xc90 [ 2834.588150][ T3439] kthread+0x2ec/0x384 [ 2834.588503][ T3439] ret_from_fork+0x10/0x20 [ 2834.588876][ T3439] irq event stamp: 0 [ 2834.589137][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2834.589581][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2834.590116][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2834.590510][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2834.590872][ T3439] ---[ end trace 0000000000000000 ]--- [ 2836.482543][ T3439] ------------[ cut here ]------------ [ 2836.482970][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2836.498106][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2836.499065][ T3439] Modules linked in: [ 2836.499489][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2836.500017][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2836.500318][ T3439] Hardware name: linux,dummy-virt (DT) [ 2836.500698][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2836.501223][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2836.501713][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2836.502175][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2836.502745][ T3439] sp : ffff8000a26d7900 [ 2836.503054][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2836.503756][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2836.504392][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2836.505052][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2836.505731][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2836.506421][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2836.506988][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2836.507618][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2836.508223][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2836.508792][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2836.509436][ T3439] Call trace: [ 2836.509679][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2836.510176][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2836.510603][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2836.511033][ T3439] process_one_work+0x7c0/0x1ab0 [ 2836.511383][ T3439] worker_thread+0x42c/0xc90 [ 2836.511742][ T3439] kthread+0x2ec/0x384 [ 2836.512080][ T3439] ret_from_fork+0x10/0x20 [ 2836.512418][ T3439] irq event stamp: 0 [ 2836.512665][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2836.513104][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2836.513575][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2836.514084][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2836.514474][ T3439] ---[ end trace 0000000000000000 ]--- [ 2837.602647][ T3439] ------------[ cut here ]------------ [ 2837.603117][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2837.622888][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2837.623935][ T3439] Modules linked in: [ 2837.624385][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2837.625124][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2837.625485][ T3439] Hardware name: linux,dummy-virt (DT) [ 2837.625850][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2837.626440][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2837.626914][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2837.627309][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2837.627809][ T3439] sp : ffff8000a26d7900 [ 2837.628109][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2837.628734][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2837.629486][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2837.630135][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2837.630854][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2837.631538][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2837.632232][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2837.632892][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2837.633530][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2837.634278][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2837.634952][ T3439] Call trace: [ 2837.635224][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2837.635712][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2837.636140][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2837.636551][ T3439] process_one_work+0x7c0/0x1ab0 [ 2837.636972][ T3439] worker_thread+0x42c/0xc90 [ 2837.637329][ T3439] kthread+0x2ec/0x384 [ 2837.637648][ T3439] ret_from_fork+0x10/0x20 [ 2837.638014][ T3439] irq event stamp: 0 [ 2837.638324][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2837.638797][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2837.639436][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2837.639998][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2837.640479][ T3439] ---[ end trace 0000000000000000 ]--- [ 2838.722761][ T3439] ------------[ cut here ]------------ [ 2838.723291][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2838.742132][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2838.743346][ T3439] Modules linked in: [ 2838.743895][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2838.744503][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2838.744855][ T3439] Hardware name: linux,dummy-virt (DT) [ 2838.745245][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2838.745720][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2838.746234][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2838.746627][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2838.747094][ T3439] sp : ffff8000a26d7900 [ 2838.747401][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2838.748100][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2838.748747][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2838.749415][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2838.750051][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2838.750642][ T3439] x14: 1ffff00010ef76de x13: 0000000000000004 x12: ffff60000d7eccba [ 2838.751358][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2838.751988][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2838.752628][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2838.753301][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2838.753988][ T3439] Call trace: [ 2838.754288][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2838.754728][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2838.755157][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2838.755555][ T3439] process_one_work+0x7c0/0x1ab0 [ 2838.755977][ T3439] worker_thread+0x42c/0xc90 [ 2838.756338][ T3439] kthread+0x2ec/0x384 [ 2838.756709][ T3439] ret_from_fork+0x10/0x20 [ 2838.757122][ T3439] irq event stamp: 0 [ 2838.757418][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2838.757949][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2838.758489][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2838.759023][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2838.759477][ T3439] ---[ end trace 0000000000000000 ]--- [ 2840.882787][ T3439] ------------[ cut here ]------------ [ 2840.883248][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2840.903459][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2840.904612][ T3439] Modules linked in: [ 2840.905122][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2840.905901][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2840.906248][ T3439] Hardware name: linux,dummy-virt (DT) [ 2840.906621][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2840.907298][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2840.907754][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2840.908165][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2840.908687][ T3439] sp : ffff8000a26d7900 [ 2840.909013][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2840.909651][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2840.910345][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2840.911063][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2840.912139][ T3439] x17: 1ffff00010f39a12 x16: 1fffe00002fcd433 x15: ffff8000877bb6f0 [ 2840.912868][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2840.913507][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2840.914138][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2840.914718][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2840.915268][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2840.915838][ T3439] Call trace: [ 2840.916106][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2840.916499][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2840.916943][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2840.917316][ T3439] process_one_work+0x7c0/0x1ab0 [ 2840.917681][ T3439] worker_thread+0x42c/0xc90 [ 2840.918058][ T3439] kthread+0x2ec/0x384 [ 2840.918371][ T3439] ret_from_fork+0x10/0x20 [ 2840.918756][ T3439] irq event stamp: 0 [ 2840.919017][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2840.919445][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2840.919945][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2840.920836][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2840.921688][ T3439] ---[ end trace 0000000000000000 ]--- [ 2842.002528][ T3439] ------------[ cut here ]------------ [ 2842.002991][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2842.022729][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2842.023735][ T3439] Modules linked in: [ 2842.024165][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2842.025327][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2842.025827][ T3439] Hardware name: linux,dummy-virt (DT) [ 2842.026331][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2842.026950][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2842.027398][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2842.027815][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2842.028189][ T3439] sp : ffff8000a26d7900 [ 2842.028458][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2842.029089][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2842.029738][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2842.030373][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2842.031081][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2842.031671][ T3439] x14: 1ffff00010ef76de x13: 0000000000000004 x12: ffff60000d7eccba [ 2842.032241][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2842.032848][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2842.033450][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2842.034101][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2842.034719][ T3439] Call trace: [ 2842.034992][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2842.035423][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2842.035851][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2842.036248][ T3439] process_one_work+0x7c0/0x1ab0 [ 2842.036640][ T3439] worker_thread+0x42c/0xc90 [ 2842.037021][ T3439] kthread+0x2ec/0x384 [ 2842.037361][ T3439] ret_from_fork+0x10/0x20 [ 2842.037722][ T3439] irq event stamp: 0 [ 2842.038028][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2842.038502][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2842.039027][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2842.039537][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2842.039979][ T3439] ---[ end trace 0000000000000000 ]--- [ 2843.128805][ T3439] ------------[ cut here ]------------ [ 2843.129337][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2843.144836][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2843.145880][ T3439] Modules linked in: [ 2843.146347][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2843.146921][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2843.147259][ T3439] Hardware name: linux,dummy-virt (DT) [ 2843.147635][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2843.148112][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2843.148600][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2843.149001][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2843.149365][ T3439] sp : ffff8000a26d7900 [ 2843.149662][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2843.150303][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2843.150988][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2843.151638][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2843.152242][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2843.152842][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2843.153443][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2843.154107][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2843.154749][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2843.155308][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2843.156007][ T3439] Call trace: [ 2843.156269][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2843.156704][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2843.157108][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2843.157484][ T3439] process_one_work+0x7c0/0x1ab0 [ 2843.157847][ T3439] worker_thread+0x42c/0xc90 [ 2843.158234][ T3439] kthread+0x2ec/0x384 [ 2843.158572][ T3439] ret_from_fork+0x10/0x20 [ 2843.158917][ T3439] irq event stamp: 0 [ 2843.159178][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2843.159619][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2843.160082][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2843.160577][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2843.161118][ T3439] ---[ end trace 0000000000000000 ]--- [ 2844.241933][ T3439] ------------[ cut here ]------------ [ 2844.242327][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2844.254747][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2844.255501][ T3439] Modules linked in: [ 2844.255894][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2844.256359][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2844.256624][ T3439] Hardware name: linux,dummy-virt (DT) [ 2844.256809][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2844.257055][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2844.257362][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2844.257573][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2844.257769][ T3439] sp : ffff8000a26d7900 [ 2844.257966][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2844.258299][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2844.258649][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2844.259027][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2844.259406][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2844.259812][ T3439] x14: 1ffff00010ef76de x13: 0000000000000004 x12: ffff60000d7eccba [ 2844.260299][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2844.260654][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2844.261032][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2844.261350][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2844.261674][ T3439] Call trace: [ 2844.261807][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2844.262082][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2844.262280][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2844.262490][ T3439] process_one_work+0x7c0/0x1ab0 [ 2844.262678][ T3439] worker_thread+0x42c/0xc90 [ 2844.262855][ T3439] kthread+0x2ec/0x384 [ 2844.263024][ T3439] ret_from_fork+0x10/0x20 [ 2844.263193][ T3439] irq event stamp: 0 [ 2844.263318][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2844.263554][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2844.263804][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2844.264087][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2844.264300][ T3439] ---[ end trace 0000000000000000 ]--- [ 2845.362419][ T3439] ------------[ cut here ]------------ [ 2845.362933][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2845.393049][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2845.394183][ T3439] Modules linked in: [ 2845.394621][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2845.395276][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2845.395623][ T3439] Hardware name: linux,dummy-virt (DT) [ 2845.395981][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2845.396465][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2845.396926][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2845.397336][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2845.397758][ T3439] sp : ffff8000a26d7900 [ 2845.398090][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2845.398728][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2845.399407][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2845.400110][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2845.400729][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2845.401437][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2845.402107][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2845.402827][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2845.403478][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2845.404113][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2845.404782][ T3439] Call trace: [ 2845.405179][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2845.405797][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2845.406262][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2845.406681][ T3439] process_one_work+0x7c0/0x1ab0 [ 2845.407132][ T3439] worker_thread+0x42c/0xc90 [ 2845.407523][ T3439] kthread+0x2ec/0x384 [ 2845.407873][ T3439] ret_from_fork+0x10/0x20 [ 2845.408292][ T3439] irq event stamp: 0 [ 2845.408582][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2845.409012][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2845.409522][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2845.410087][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2845.410556][ T3439] ---[ end trace 0000000000000000 ]--- [ 2846.724312][ T3439] ------------[ cut here ]------------ [ 2846.724724][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2846.752484][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2846.753573][ T3439] Modules linked in: [ 2846.754105][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2846.754890][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2846.755299][ T3439] Hardware name: linux,dummy-virt (DT) [ 2846.756678][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2846.757238][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2846.757806][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2846.758261][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2846.758663][ T3439] sp : ffff8000a26d7900 [ 2846.758992][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2846.759717][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2846.760468][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2846.761180][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2846.762007][ T3439] x17: 1ffff00010f39a12 x16: 1fffe00002fcd433 x15: ffff8000877bb6f0 [ 2846.762720][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2846.763456][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2846.764098][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2846.764669][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2846.765270][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2846.765887][ T3439] Call trace: [ 2846.766164][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2846.766635][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2846.767156][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2846.767674][ T3439] process_one_work+0x7c0/0x1ab0 [ 2846.768134][ T3439] worker_thread+0x42c/0xc90 [ 2846.768556][ T3439] kthread+0x2ec/0x384 [ 2846.768890][ T3439] ret_from_fork+0x10/0x20 [ 2846.769309][ T3439] irq event stamp: 0 [ 2846.769603][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2846.770093][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2846.770623][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2846.771154][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2846.771698][ T3439] ---[ end trace 0000000000000000 ]--- [ 2847.841646][ T3439] ------------[ cut here ]------------ [ 2847.841973][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2847.853386][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2847.854274][ T3439] Modules linked in: [ 2847.854648][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2847.855097][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2847.855326][ T3439] Hardware name: linux,dummy-virt (DT) [ 2847.855667][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2847.856206][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2847.856573][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2847.856919][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2847.857259][ T3439] sp : ffff8000a26d7900 [ 2847.857499][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2847.858011][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2847.858456][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2847.858921][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2847.859457][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2847.859847][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2847.860310][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2847.861023][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2847.861627][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2847.862113][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2847.862411][ T3439] Call trace: [ 2847.862538][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2847.862773][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2847.862970][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2847.863274][ T3439] process_one_work+0x7c0/0x1ab0 [ 2847.863569][ T3439] worker_thread+0x42c/0xc90 [ 2847.863825][ T3439] kthread+0x2ec/0x384 [ 2847.864076][ T3439] ret_from_fork+0x10/0x20 [ 2847.864389][ T3439] irq event stamp: 0 [ 2847.864587][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2847.864939][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2847.865339][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2847.865813][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2847.866178][ T3439] ---[ end trace 0000000000000000 ]--- [ 2848.962237][ T3439] ------------[ cut here ]------------ [ 2848.962670][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2848.980607][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2848.981769][ T3439] Modules linked in: [ 2848.982074][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2848.982588][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2848.982896][ T3439] Hardware name: linux,dummy-virt (DT) [ 2848.983265][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2848.983644][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2848.984015][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2848.984355][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2848.984665][ T3439] sp : ffff8000a26d7900 [ 2848.984966][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2848.985493][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2848.986142][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2848.986605][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2848.986998][ T3439] x17: 1ffff00010f39a12 x16: 1fffe00002fcd433 x15: ffff8000877bb6f0 [ 2848.987531][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2848.987975][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2848.988421][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2848.988853][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2848.989296][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2848.989748][ T3439] Call trace: [ 2848.990023][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2848.990358][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2848.990694][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2848.991080][ T3439] process_one_work+0x7c0/0x1ab0 [ 2848.991397][ T3439] worker_thread+0x42c/0xc90 [ 2848.991705][ T3439] kthread+0x2ec/0x384 [ 2848.992066][ T3439] ret_from_fork+0x10/0x20 [ 2848.992396][ T3439] irq event stamp: 0 [ 2848.992556][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2848.992870][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2848.993374][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2848.993710][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2848.994032][ T3439] ---[ end trace 0000000000000000 ]--- [ 2850.083641][ T3439] ------------[ cut here ]------------ [ 2850.084117][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2850.112232][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2850.113180][ T3439] Modules linked in: [ 2850.113584][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2850.114164][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2850.114464][ T3439] Hardware name: linux,dummy-virt (DT) [ 2850.114793][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2850.115251][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2850.115663][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2850.116035][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2850.116411][ T3439] sp : ffff8000a26d7900 [ 2850.116682][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2850.117298][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2850.117911][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2850.118492][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: ffff000015145b00 [ 2850.119099][ T3439] x17: 1ffff00010f39a12 x16: 1fffe00002a28b73 x15: 1ffff00010f39a11 [ 2850.119672][ T3439] x14: 00004c4b40000000 x13: 00004c4b40000000 x12: ffff60000d7eccba [ 2850.120283][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2850.120934][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2850.121500][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2850.122139][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2850.122715][ T3439] Call trace: [ 2850.122968][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2850.123407][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2850.123873][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2850.124238][ T3439] process_one_work+0x7c0/0x1ab0 [ 2850.124615][ T3439] worker_thread+0x42c/0xc90 [ 2850.125004][ T3439] kthread+0x2ec/0x384 [ 2850.125325][ T3439] ret_from_fork+0x10/0x20 [ 2850.125706][ T3439] irq event stamp: 0 [ 2850.126013][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2850.126490][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2850.127016][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2850.127552][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2850.127966][ T3439] ---[ end trace 0000000000000000 ]--- [ 2851.202773][ T3439] ------------[ cut here ]------------ [ 2851.203203][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2851.212934][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2851.213831][ T3439] Modules linked in: [ 2851.214281][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2851.214820][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2851.215134][ T3439] Hardware name: linux,dummy-virt (DT) [ 2851.215569][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2851.216025][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2851.216459][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2851.216851][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2851.217227][ T3439] sp : ffff8000a26d7900 [ 2851.217501][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2851.218106][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2851.218640][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2851.219239][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2851.219790][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 2851.220369][ T3439] x14: 0000000000000000 x13: 0000000000000004 x12: ffff60000d7eccba [ 2851.221096][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2851.221695][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2851.222354][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2851.223018][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2851.223636][ T3439] Call trace: [ 2851.223890][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2851.224313][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2851.224689][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2851.225072][ T3439] process_one_work+0x7c0/0x1ab0 [ 2851.225453][ T3439] worker_thread+0x42c/0xc90 [ 2851.225830][ T3439] kthread+0x2ec/0x384 [ 2851.226324][ T3439] ret_from_fork+0x10/0x20 [ 2851.226726][ T3439] irq event stamp: 0 [ 2851.227036][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2851.227531][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2851.228075][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2851.228583][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2851.229033][ T3439] ---[ end trace 0000000000000000 ]--- [ 2852.322614][ T3439] ------------[ cut here ]------------ [ 2852.323045][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2852.339001][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2852.339955][ T3439] Modules linked in: [ 2852.340345][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2852.340967][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2852.341291][ T3439] Hardware name: linux,dummy-virt (DT) [ 2852.341639][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2852.342096][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2852.342565][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2852.343031][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2852.343426][ T3439] sp : ffff8000a26d7900 [ 2852.343702][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2852.344343][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2852.344959][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2852.345584][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2852.346303][ T3439] x17: 1ffff00010f39a12 x16: 1fffe00002fcd433 x15: ffff8000877bb6f0 [ 2852.346940][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2852.347660][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2852.348332][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2852.348986][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2852.349751][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2852.350472][ T3439] Call trace: [ 2852.350753][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2852.351197][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2852.351696][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2852.352134][ T3439] process_one_work+0x7c0/0x1ab0 [ 2852.352533][ T3439] worker_thread+0x42c/0xc90 [ 2852.352932][ T3439] kthread+0x2ec/0x384 [ 2852.353355][ T3439] ret_from_fork+0x10/0x20 [ 2852.353827][ T3439] irq event stamp: 0 [ 2852.354156][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2852.354612][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2852.355104][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2852.355647][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2852.356152][ T3439] ---[ end trace 0000000000000000 ]--- [ 2854.322043][ T3439] ------------[ cut here ]------------ [ 2854.322418][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2854.332533][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2854.332999][ T3439] Modules linked in: [ 2854.333318][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2854.333889][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2854.334161][ T3439] Hardware name: linux,dummy-virt (DT) [ 2854.334375][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2854.334684][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2854.334964][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2854.335187][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2854.335427][ T3439] sp : ffff8000a26d7900 [ 2854.335583][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2854.335906][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2854.336321][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2854.336626][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2854.337115][ T3439] x17: 1ffff00010f39a12 x16: 1fffe00002fcd433 x15: ffff8000877bb6f0 [ 2854.337523][ T3439] x14: 1ffff00010ef76de x13: ffff7fffe47ee000 x12: ffff60000d7eccba [ 2854.337901][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2854.338357][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2854.338781][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2854.339241][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2854.339679][ T3439] Call trace: [ 2854.339854][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2854.340110][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2854.340386][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2854.340686][ T3439] process_one_work+0x7c0/0x1ab0 [ 2854.341087][ T3439] worker_thread+0x42c/0xc90 [ 2854.341432][ T3439] kthread+0x2ec/0x384 [ 2854.341776][ T3439] ret_from_fork+0x10/0x20 [ 2854.342160][ T3439] irq event stamp: 0 [ 2854.342372][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2854.342633][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2854.342943][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2854.343294][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2854.343609][ T3439] ---[ end trace 0000000000000000 ]--- [ 2855.444082][ T3439] ------------[ cut here ]------------ [ 2855.444607][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2855.463434][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2855.464367][ T3439] Modules linked in: [ 2855.464791][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2855.465358][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2855.465706][ T3439] Hardware name: linux,dummy-virt (DT) [ 2855.466088][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2855.466569][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2855.467036][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2855.467427][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2855.467806][ T3439] sp : ffff8000a26d7900 [ 2855.468103][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2855.468678][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2855.469266][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2855.469815][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2855.470457][ T3439] x17: 1ffff00010f39a12 x16: 1fffe00002fcd433 x15: ffff8000877bb6f0 [ 2855.471275][ T3439] x14: 0000000000000001 x13: 9bc737e938375112 x12: ffff60000d7eccba [ 2855.471997][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2855.472624][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2855.473247][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2855.473900][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2855.474527][ T3439] Call trace: [ 2855.474843][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2855.475315][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2855.475745][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2855.476137][ T3439] process_one_work+0x7c0/0x1ab0 [ 2855.476554][ T3439] worker_thread+0x42c/0xc90 [ 2855.476981][ T3439] kthread+0x2ec/0x384 [ 2855.477348][ T3439] ret_from_fork+0x10/0x20 [ 2855.477722][ T3439] irq event stamp: 0 [ 2855.478112][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2855.478687][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2855.479412][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2855.479950][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2855.480448][ T3439] ---[ end trace 0000000000000000 ]--- [ 2856.562731][ T3439] ------------[ cut here ]------------ [ 2856.563208][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2856.582652][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2856.583577][ T3439] Modules linked in: [ 2856.584001][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2856.584533][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2856.584850][ T3439] Hardware name: linux,dummy-virt (DT) [ 2856.585190][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2856.585668][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2856.586149][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2856.586558][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2856.586918][ T3439] sp : ffff8000a26d7900 [ 2856.587185][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2856.587811][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2856.588404][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2856.588994][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2856.589568][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2856.590196][ T3439] x14: 1ffff00010ef76de x13: 0000000000000004 x12: ffff60000d7eccba [ 2856.590766][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2856.591375][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2856.591944][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2856.592535][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2856.593207][ T3439] Call trace: [ 2856.593471][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2856.593936][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2856.594350][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2856.594733][ T3439] process_one_work+0x7c0/0x1ab0 [ 2856.595137][ T3439] worker_thread+0x42c/0xc90 [ 2856.595509][ T3439] kthread+0x2ec/0x384 [ 2856.595846][ T3439] ret_from_fork+0x10/0x20 [ 2856.596259][ T3439] irq event stamp: 0 [ 2856.596582][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2856.597072][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2856.597574][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2856.598123][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2856.598586][ T3439] ---[ end trace 0000000000000000 ]--- [ 2857.682072][ T3439] ------------[ cut here ]------------ [ 2857.682354][ T3439] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2857.698139][ T3439] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x2b8/0x464, CPU#0: kworker/0:3/3439 [ 2857.698819][ T3439] Modules linked in: [ 2857.699157][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/0:3 Tainted: G W L syzkaller #0 PREEMPT [ 2857.699743][ T3439] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2857.700022][ T3439] Hardware name: linux,dummy-virt (DT) [ 2857.700300][ T3439] Workqueue: events drm_fb_helper_damage_work [ 2857.700717][ T3439] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2857.701113][ T3439] pc : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2857.701365][ T3439] lr : drm_crtc_wait_one_vblank+0x2b8/0x464 [ 2857.701579][ T3439] sp : ffff8000a26d7900 [ 2857.701747][ T3439] x29: ffff8000a26d79b0 x28: 0000000000000000 x27: ffff8000a26d7940 [ 2857.702139][ T3439] x26: ffff0000145e1088 x25: ffff800085f74d40 x24: 0000000000000000 [ 2857.702566][ T3439] x23: 1ffff000144daf22 x22: ffff00001473a008 x21: 0000000000000000 [ 2857.702888][ T3439] x20: ffff000014731000 x19: ffff00001473a000 x18: 0000000000000000 [ 2857.703273][ T3439] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877bb6f0 [ 2857.703688][ T3439] x14: 1ffff00010ef76de x13: 0000000000000004 x12: ffff60000d7eccba [ 2857.704094][ T3439] x11: 1fffe0000d7eccb9 x10: ffff60000d7eccb9 x9 : dfff800000000000 [ 2857.704703][ T3439] x8 : ffff8000a26d7430 x7 : ffff8000a26d75b0 x6 : ffff8000a26d7550 [ 2857.705313][ T3439] x5 : ffff8000a26d7490 x4 : 1ffff000144daea0 x3 : 1fffe0000d7ebf3c [ 2857.706009][ T3439] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000177d0000 [ 2857.706489][ T3439] Call trace: [ 2857.706629][ T3439] drm_crtc_wait_one_vblank+0x2b8/0x464 (P) [ 2857.706893][ T3439] drm_client_modeset_wait_for_vblank+0xb4/0xe0 [ 2857.707127][ T3439] drm_fb_helper_damage_work+0x144/0x5c0 [ 2857.707351][ T3439] process_one_work+0x7c0/0x1ab0 [ 2857.707583][ T3439] worker_thread+0x42c/0xc90 [ 2857.707772][ T3439] kthread+0x2ec/0x384 [ 2857.707979][ T3439] ret_from_fork+0x10/0x20 [ 2857.708193][ T3439] irq event stamp: 0 [ 2857.708371][ T3439] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 2857.708817][ T3439] hardirqs last disabled at (0): [] copy_process+0x16a8/0x5700 [ 2857.709353][ T3439] softirqs last enabled at (0): [] copy_process+0x16c8/0x5700 [ 2857.709943][ T3439] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2857.710378][ T3439] ---[ end trace 0000000000000000 ]---