last executing test programs: 8m6.679981108s ago: executing program 2 (id=1728): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000000c0)={0x0, 0xff60}) 8m5.980755323s ago: executing program 2 (id=1729): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000007000000080000000800000045000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000015000000000000000800"/28], 0x50) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@delchain={0x24, 0x64, 0x800, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x6, 0xffff}, {0xa, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4844) 8m4.275168049s ago: executing program 0 (id=1732): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0x0, 0x0) 8m3.945687678s ago: executing program 2 (id=1734): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@empty, r1}, 0x14) 8m3.945334135s ago: executing program 1 (id=1735): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7, 0x1}, {0x2, 0x5}, {0x89, 0x7}, {0x7, 0x5}], "a981ba4574e811a7"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000010}, 0x8000) 8m3.849346392s ago: executing program 4 (id=1736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000ff, 0x0, 0x7f}]}) 8m3.551162866s ago: executing program 1 (id=1738): syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="fffffffffffff5ab325f8d6381001400080045e100140065000000219001"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @remote}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x800002001fe, 0x1afa817befb749a1) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffff8, @loopback, 0x9}}, 0x24) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x1f00) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f00000000c0)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x80000425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x2}, {0x6, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}], 0x54) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000006fc857f20bc4954c5dde6cd4766000007ffffffb702000008000000b703000004000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000040)='./tracefs\x00', 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x9220bde6ddc693f) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}, {0x5, 0x9, 0x3, 0x80, @time={0x6, 0x3}, {0x2, 0x7}, {0x6, 0x1}, @time=@time={0x6, 0x4}}], 0x38) shutdown(r1, 0x2) close(r1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) 8m3.354127455s ago: executing program 3 (id=1739): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f040, 0x100000}) 8m3.163732235s ago: executing program 4 (id=1740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x109200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x300, 0x20000b}}) 8m3.030184696s ago: executing program 3 (id=1741): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 8m2.511449768s ago: executing program 3 (id=1742): openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x2, 0x4, 0x800000c0}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 8m2.459069076s ago: executing program 1 (id=1743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x20000002, 0x0}) 8m2.424975531s ago: executing program 4 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x101, 0x20000000, 0x2, 0x4}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x10) 8m2.185204121s ago: executing program 0 (id=1745): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000007000000080000000800000045000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000015000000000000000800"/28], 0x50) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@delchain={0x24, 0x64, 0x800, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x6, 0xffff}, {0xa, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4844) 8m2.051145128s ago: executing program 2 (id=1746): personality(0x4000005) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 8m0.849423575s ago: executing program 3 (id=1747): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m59.769288241s ago: executing program 0 (id=1748): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x8, 0x3) 7m59.731737399s ago: executing program 1 (id=1749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000429c29261000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 7m58.774113638s ago: executing program 4 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x30, r1, 0x101, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}]}, 0x30}}, 0x20004000) 7m58.560653275s ago: executing program 2 (id=1751): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000a40)='active', 0x6) 7m58.320929325s ago: executing program 3 (id=1752): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x944, 0x204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf7, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@string={0x4, 0x3, 'I\\'}}]}) 7m58.313649256s ago: executing program 0 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='+192.168.1.1', 0xc) 7m58.236804764s ago: executing program 1 (id=1754): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 7m58.14067098s ago: executing program 4 (id=1755): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="19f732", 0x3}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) 7m58.051146695s ago: executing program 0 (id=1756): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000080)=""/40, 0x28) 7m57.992131891s ago: executing program 1 (id=1757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x7ffffff7, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m57.980619997s ago: executing program 2 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000007000000080000000800000045000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000015000000000000000800"/28], 0x50) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@delchain={0x24, 0x64, 0x800, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x6, 0xffff}, {0xa, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4844) 7m50.295092808s ago: executing program 0 (id=1759): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 7m49.992159037s ago: executing program 4 (id=1760): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 7m38.0285619s ago: executing program 3 (id=1761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 7m34.252174737s ago: executing program 32 (id=1757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x7ffffff7, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m13.605343454s ago: executing program 33 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000007000000080000000800000045000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000015000000000000000800"/28], 0x50) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@delchain={0x24, 0x64, 0x800, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x6, 0xffff}, {0xa, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4844) 6m57.391929806s ago: executing program 34 (id=1759): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 6m45.897785459s ago: executing program 35 (id=1761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 6m31.448927755s ago: executing program 36 (id=1760): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 6m1.360882039s ago: executing program 6 (id=1763): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@cgroup=r1, r1, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) 56.637039587s ago: executing program 9 (id=1766): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x1, 0x1, 0x4, 0x9, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 6 (id=1763): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@cgroup=r1, r1, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) kernel console output (not intermixed with test programs): _dvb_demux_ioctl+0x10/0x10 [ 533.088517][ T9901] __x64_sys_ioctl+0x18e/0x210 [ 533.088543][ T9901] do_syscall_64+0x123/0x790 [ 533.088568][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.088590][ T9901] RIP: 0033:0x7f41a579e159 [ 533.088608][ T9901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.088629][ T9901] RSP: 002b:00007f41a66b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.088649][ T9901] RAX: ffffffffffffffda RBX: 00007f41a5a26180 RCX: 00007f41a579e159 [ 533.088664][ T9901] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 533.088678][ T9901] RBP: 00007f41a583506b R08: 0000000000000000 R09: 0000000000000000 [ 533.088692][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.088705][ T9901] R13: 00007f41a5a26218 R14: 00007f41a5a26180 R15: 00007ffcc166fed8 [ 533.088737][ T9901] [ 533.088793][ T9901] Mem-Info: [ 533.088901][ T9901] active_anon:36112 inactive_anon:275 isolated_anon:0 [ 533.088901][ T9901] active_file:5037 inactive_file:57415 isolated_file:0 [ 533.088901][ T9901] unevictable:1161 dirty:746 writeback:0 [ 533.088901][ T9901] slab_reclaimable:9446 slab_unreclaimable:102269 [ 533.088901][ T9901] mapped:39266 shmem:29078 pagetables:1485 [ 533.088901][ T9901] sec_pagetables:0 bounce:0 [ 533.088901][ T9901] kernel_misc_reclaimable:0 [ 533.088901][ T9901] free:1259334 free_pcp:12632 free_cma:0 [ 533.088968][ T9901] Node 0 active_anon:141392kB inactive_anon:684kB active_file:20148kB inactive_file:229376kB unevictable:2532kB isolated(anon):0kB isolated(file):0kB mapped:157040kB dirty:2976kB writeback:0kB shmem:110728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12412kB pagetables:5812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 533.089054][ T9901] Node 1 active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:8kB writeback:0kB shmem:5584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 533.089124][ T9901] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.089200][ T9901] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 533.089410][ T9901] Node 0 DMA32 free:1086840kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:141392kB inactive_anon:684kB active_file:20148kB inactive_file:229376kB unevictable:2532kB writepending:2976kB zspages:848kB present:3129332kB managed:2530392kB mlocked:0kB bounce:0kB free_pcp:44772kB local_pcp:27192kB free_cma:0kB [ 533.089542][ T9901] lowmem_reserve[]: 0 0 0 0 0 [ 533.089678][ T9901] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.089810][ T9901] lowmem_reserve[]: 0 0 0 0 0 [ 533.090000][ T9901] Node 1 Normal free:3935136kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5756kB local_pcp:0kB free_cma:0kB [ 533.090110][ T9901] lowmem_reserve[]: 0 0 0 0 0 [ 533.090343][ T9901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 533.091297][ T9901] Node 0 DMA32: 2600*4kB (M) 53*8kB (ME) 97*16kB (UME) 1280*32kB (UME) 899*64kB (UME) 565*128kB (UME) 162*256kB (ME) 50*512kB (UME) 15*1024kB (UME) 11*2048kB (UM) 195*4096kB (UM) = 1086872kB [ 533.092528][ T9901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 533.093066][ T9901] Node 1 Normal: 4*4kB (U) 10*8kB (UM) 4*16kB (U) 4*32kB (UM) 10*64kB (UM) 8*128kB (U) 4*256kB (U) 2*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 958*4096kB (UM) = 3935136kB [ 533.094273][ T9901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.094300][ T9901] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 533.094356][ T9901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.094400][ T9901] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 533.094450][ T9901] 91480 total pagecache pages [ 533.094501][ T9901] 0 pages in swap cache [ 533.094545][ T9901] Free swap = 123500kB [ 533.094586][ T9901] Total swap = 124996kB [ 533.094632][ T9901] 2097051 pages RAM [ 533.094673][ T9901] 0 pages HighMem/MovableOnly [ 533.094718][ T9901] 432821 pages reserved [ 533.094766][ T9901] 0 pages cma reserved [ 534.743407][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.966'. [ 536.190237][ T9924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.972'. [ 536.523212][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 536.523248][ T31] audit: type=1400 audit(1790538585.539:3012): avc: denied { recv } for pid=9915 comm="syz.0.972" saddr=10.128.0.169 src=30006 daddr=10.128.0.175 dest=47152 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 536.594076][ T31] audit: type=1400 audit(1790538585.609:3013): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 536.594687][ T31] audit: type=1400 audit(1790538585.609:3014): avc: denied { open } for pid=5614 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 536.594728][ T31] audit: type=1400 audit(1790538585.609:3015): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 536.694604][ T31] audit: type=1400 audit(1790538585.709:3016): avc: denied { read write } for pid=9931 comm="syz.3.975" name="video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 536.694675][ T31] audit: type=1400 audit(1790538585.709:3017): avc: denied { open } for pid=9931 comm="syz.3.975" path="/dev/video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 536.760799][ T31] audit: type=1400 audit(1790538585.779:3018): avc: denied { ioctl } for pid=9931 comm="syz.3.975" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 536.798268][ T31] audit: type=1400 audit(1790538585.819:3019): avc: denied { prog_load } for pid=9934 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 536.799400][ T31] audit: type=1400 audit(1790538585.819:3020): avc: denied { bpf } for pid=9934 comm="syz.1.976" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 536.801085][ T31] audit: type=1400 audit(1790538585.819:3021): avc: denied { perfmon } for pid=9934 comm="syz.1.976" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 539.370828][ T9963] misc userio: The device must be registered before sending interrupts [ 540.156900][ T5784] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 540.368275][ T5784] usb 5-1: Using ep0 maxpacket: 32 [ 540.377012][ T5784] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 540.380809][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 540.380843][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.380866][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 540.380888][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 540.387451][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.387479][ T5784] usb 5-1: Product: syz [ 540.387494][ T5784] usb 5-1: Manufacturer: syz [ 540.387509][ T5784] usb 5-1: SerialNumber: syz [ 540.738933][ T5784] usb 5-1: config 0 descriptor?? [ 540.742493][ T9965] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 540.759512][ T5784] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 541.258358][ T988] usb 5-1: USB disconnect, device number 14 [ 541.258473][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 541.258818][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 541.691282][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 541.691300][ T31] audit: type=1400 audit(1790538590.709:3063): avc: denied { create } for pid=9994 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.729132][ T31] audit: type=1400 audit(1790538590.749:3064): avc: denied { write } for pid=9994 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.808320][ T31] audit: type=1400 audit(1790538590.829:3065): avc: denied { module_request } for pid=9993 comm="syz.3.1000" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 541.903452][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 542.537320][T10012] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 542.622972][ T31] audit: type=1400 audit(1790538591.639:3066): avc: denied { read } for pid=10017 comm="syz.3.1009" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 542.652737][ T31] audit: type=1400 audit(1790538591.639:3067): avc: denied { open } for pid=10017 comm="syz.3.1009" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 542.693550][ T31] audit: type=1400 audit(1790538591.709:3068): avc: denied { ioctl } for pid=10017 comm="syz.3.1009" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 542.941221][ T31] audit: type=1400 audit(1790538591.959:3069): avc: denied { read append } for pid=10025 comm="syz.3.1012" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 542.974282][ T31] audit: type=1400 audit(1790538591.959:3070): avc: denied { open } for pid=10025 comm="syz.3.1012" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 542.979337][ T31] audit: type=1400 audit(1790538591.989:3071): avc: denied { ioctl } for pid=10025 comm="syz.3.1012" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 543.032341][T10032] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 543.032363][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 543.049283][ T31] audit: type=1400 audit(1790538592.069:3072): avc: denied { setopt } for pid=10030 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 543.342698][T10048] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 543.938171][T10058] netlink: 250 bytes leftover after parsing attributes in process `syz.0.1026'. [ 544.106962][T10066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1020'. [ 544.227848][T10073] comedi comedi1: dt2811-pgh: a I/O base address must be specified [ 544.694297][T10094] warn_alloc: 1 callbacks suppressed [ 544.694320][T10094] syz.3.1036: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 544.694547][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.3.1036 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.694576][T10094] Tainted: [L]=SOFTLOCKUP [ 544.694584][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 544.694597][T10094] Call Trace: [ 544.694604][T10094] [ 544.694614][T10094] dump_stack_lvl+0x100/0x190 [ 544.694650][T10094] warn_alloc.cold+0x9e/0xb2 [ 544.694676][T10094] ? __pfx_warn_alloc+0x10/0x10 [ 544.694706][T10094] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 544.694748][T10094] __vmalloc_node_range_noprof+0x123b/0x1420 [ 544.694781][T10094] ? rcu_is_watching+0x13/0xc0 [ 544.694810][T10094] ? trace_contention_end+0x126/0x160 [ 544.694840][T10094] ? dvb_demux_do_ioctl+0x929/0x1200 [ 544.694866][T10094] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 544.694894][T10094] ? __pfx___mutex_lock+0x10/0x10 [ 544.694926][T10094] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 544.694957][T10094] ? preempt_schedule_irq+0x79/0x90 [ 544.695001][T10094] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 544.695027][T10094] __vmalloc_node_noprof+0xad/0xf0 [ 544.695058][T10094] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 544.695087][T10094] dvb_demux_do_ioctl+0x9e0/0x1200 [ 544.695112][T10094] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 544.695144][T10094] dvb_usercopy+0x167/0x340 [ 544.695166][T10094] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 544.695193][T10094] ? __pfx_dvb_usercopy+0x10/0x10 [ 544.695229][T10094] ? selinux_file_ioctl+0x13b/0x290 [ 544.695254][T10094] ? selinux_file_ioctl+0xb6/0x290 [ 544.695283][T10094] dvb_demux_ioctl+0x29/0x40 [ 544.695305][T10094] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 544.695329][T10094] __x64_sys_ioctl+0x18e/0x210 [ 544.695357][T10094] do_syscall_64+0x123/0x790 [ 544.695382][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.695405][T10094] RIP: 0033:0x7f2d7c59e159 [ 544.695422][T10094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.695440][T10094] RSP: 002b:00007f2d7d407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.695460][T10094] RAX: ffffffffffffffda RBX: 00007f2d7c826180 RCX: 00007f2d7c59e159 [ 544.695474][T10094] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 544.695488][T10094] RBP: 00007f2d7c63506b R08: 0000000000000000 R09: 0000000000000000 [ 544.695501][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.695514][T10094] R13: 00007f2d7c826218 R14: 00007f2d7c826180 R15: 00007ffee00f59d8 [ 544.695545][T10094] [ 544.695576][T10094] Mem-Info: [ 544.695635][T10094] active_anon:19666 inactive_anon:275 isolated_anon:0 [ 544.695635][T10094] active_file:5037 inactive_file:57417 isolated_file:0 [ 544.695635][T10094] unevictable:1161 dirty:401 writeback:0 [ 544.695635][T10094] slab_reclaimable:9534 slab_unreclaimable:102517 [ 544.695635][T10094] mapped:32853 shmem:12581 pagetables:1484 [ 544.695635][T10094] sec_pagetables:0 bounce:0 [ 544.695635][T10094] kernel_misc_reclaimable:0 [ 544.695635][T10094] free:1268341 free_pcp:20935 free_cma:0 [ 544.695695][T10094] Node 0 active_anon:75608kB inactive_anon:684kB active_file:20148kB inactive_file:229384kB unevictable:2532kB isolated(anon):0kB isolated(file):0kB mapped:131360kB dirty:1600kB writeback:0kB shmem:44740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12428kB pagetables:5808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 544.695790][T10094] Node 1 active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:5584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 544.695849][T10094] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.695989][T10094] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 544.696268][T10094] Node 0 DMA32 free:1121860kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:75608kB inactive_anon:684kB active_file:20148kB inactive_file:229384kB unevictable:2532kB writepending:1600kB zspages:848kB present:3129332kB managed:2530392kB mlocked:0kB bounce:0kB free_pcp:78992kB local_pcp:27052kB free_cma:0kB [ 544.696370][T10094] lowmem_reserve[]: 0 0 0 0 0 [ 544.697055][T10094] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.697175][T10094] lowmem_reserve[]: 0 0 0 0 0 [ 544.697410][T10094] Node 1 Normal free:3936144kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4748kB local_pcp:0kB free_cma:0kB [ 544.697478][T10094] lowmem_reserve[]: 0 0 0 0 0 [ 544.697772][T10094] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 544.698585][T10094] Node 0 DMA32: 3451*4kB (UM) 1123*8kB (UME) 1481*16kB (UME) 1042*32kB (UME) 736*64kB (UME) 589*128kB (UME) 196*256kB (UME) 62*512kB (ME) 18*1024kB (UME) 10*2048kB (UM) 195*4096kB (UM) = 1121876kB [ 544.699492][T10094] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 544.700239][T10094] Node 1 Normal: 4*4kB (U) 10*8kB (UM) 5*16kB (UM) 3*32kB (U) 10*64kB (UM) 8*128kB (U) 4*256kB (U) 2*512kB (UM) 0*1024kB 4*2048kB (UM) 958*4096kB (UM) = 3936144kB [ 544.701227][T10094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.701252][T10094] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 544.701343][T10094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.701437][T10094] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 544.701487][T10094] 75012 total pagecache pages [ 544.701527][T10094] 0 pages in swap cache [ 544.701571][T10094] Free swap = 123500kB [ 544.701611][T10094] Total swap = 124996kB [ 544.701657][T10094] 2097051 pages RAM [ 544.701695][T10094] 0 pages HighMem/MovableOnly [ 544.701703][T10094] 432821 pages reserved [ 544.701709][T10094] 0 pages cma reserved [ 545.633656][T10102] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 545.991369][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1046'. [ 545.991405][T10105] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 546.717197][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 546.717265][ T31] audit: type=1400 audit(1790538595.739:3118): avc: denied { module_request } for pid=10111 comm="syz.4.1050" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 547.362762][ T31] audit: type=1400 audit(1790538596.379:3119): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 547.399396][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 547.501813][ T31] audit: type=1400 audit(1790538596.519:3120): avc: denied { ioctl } for pid=10123 comm="syz.3.1053" path="socket:[24645]" dev="sockfs" ino=24645 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 547.554895][ T31] audit: type=1400 audit(1790538596.569:3121): avc: denied { read } for pid=10111 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 547.602441][ T31] audit: type=1400 audit(1790538596.619:3122): avc: denied { read write } for pid=10127 comm="syz.0.1055" name="swradio0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 547.602594][ T31] audit: type=1400 audit(1790538596.619:3123): avc: denied { open } for pid=10127 comm="syz.0.1055" path="/dev/swradio0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 547.605753][ T31] audit: type=1400 audit(1790538596.619:3124): avc: denied { ioctl } for pid=10127 comm="syz.0.1055" path="/dev/swradio0" dev="devtmpfs" ino=953 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 547.762591][T10131] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 548.001108][ T31] audit: type=1400 audit(1790538597.009:3125): avc: denied { create } for pid=10140 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 548.001164][ T31] audit: type=1400 audit(1790538597.009:3126): avc: denied { setopt } for pid=10140 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 548.066476][T10115] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1050'. [ 548.179780][ T31] audit: type=1400 audit(1790538597.179:3127): avc: denied { create } for pid=10135 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 548.476549][T10151] overlayfs: failed to resolve './dev': -2 [ 549.591053][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1070'. [ 550.387364][T10186] CIFS mount error: No usable UNC path provided in device string! [ 550.387364][T10186] [ 550.390194][T10186] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 551.757884][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 551.757902][ T31] audit: type=1400 audit(1790538600.779:3191): avc: denied { execute } for pid=10206 comm="syz.2.1080" name="file0" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.759588][ T31] audit: type=1400 audit(1790538600.779:3192): avc: denied { execute_no_trans } for pid=10206 comm="syz.2.1080" path="/234/file0" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.764357][ T31] audit: type=1400 audit(1790538600.779:3193): avc: denied { write } for pid=10206 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 551.877890][ T31] audit: type=1400 audit(1790538600.899:3194): avc: denied { write } for pid=10212 comm="syz.0.1091" name="comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.889887][T10214] comedi comedi0: fl512: I/O base address not correctly aligned [ 551.932495][ T31] audit: type=1400 audit(1790538600.949:3195): avc: denied { allowed } for pid=10216 comm="syz.2.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 551.933223][ T31] audit: type=1400 audit(1790538600.949:3196): avc: denied { create } for pid=10216 comm="syz.2.1092" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 552.046324][ T31] audit: type=1400 audit(1790538601.059:3197): avc: denied { create } for pid=10220 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 552.066673][ T31] audit: type=1400 audit(1790538601.079:3198): avc: denied { setopt } for pid=10220 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 552.077729][T10223] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 552.191364][T10229] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1097'. [ 552.404488][ T31] audit: type=1400 audit(1790538601.419:3199): avc: denied { read } for pid=10245 comm="syz.1.1107" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 552.431109][ T31] audit: type=1400 audit(1790538601.449:3200): avc: denied { getopt } for pid=10246 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.368355][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 553.396844][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1112'. [ 553.487329][T10271] openvswitch: netlink: Key type 4640 is out of range max 32 [ 553.528057][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 553.528966][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 553.529894][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.529918][ T9] usb 4-1: config 0 has no interface number 0 [ 553.529944][ T9] usb 4-1: config 0 interface 1 has no altsetting 0 [ 553.531693][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.531718][ T9] usb 4-1: Product: syz [ 553.531733][ T9] usb 4-1: Manufacturer: syz [ 553.531747][ T9] usb 4-1: SerialNumber: syz [ 553.540723][ T9] usb 4-1: config 0 descriptor?? [ 553.687092][ T5338] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 553.758352][ T9] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 553.839116][ T5338] usb 1-1: Using ep0 maxpacket: 16 [ 553.843929][ T5338] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 553.846924][ T5338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.846949][ T5338] usb 1-1: Product: syz [ 553.846963][ T5338] usb 1-1: Manufacturer: syz [ 553.846977][ T5338] usb 1-1: SerialNumber: syz [ 553.849686][ T5338] usb 1-1: config 0 descriptor?? [ 553.854327][ T5338] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 553.879033][T10283] netlink: 'syz.2.1124': attribute type 12 has an invalid length. [ 553.997654][ T9] usb 4-1: USB disconnect, device number 17 [ 554.291935][ T5338] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 554.292069][ T5338] visor 1-1:0.0: probe with driver visor failed with error -71 [ 554.300345][ T5338] usb 1-1: USB disconnect, device number 27 [ 555.666888][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1132'. [ 555.897909][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1131'. [ 556.120196][T10310] overlayfs: failed to clone lowerpath [ 557.071915][T10326] misc userio: Invalid payload size [ 557.111596][T10324] misc userio: No port type given on /dev/userio [ 557.431104][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 557.431122][ T31] audit: type=1400 audit(1790538606.449:3223): avc: denied { create } for pid=10328 comm="syz.1.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 557.463815][ T31] audit: type=1400 audit(1790538606.459:3224): avc: denied { setopt } for pid=10328 comm="syz.1.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 557.504736][T10331] openvswitch: netlink: IP tunnel TTL not specified. [ 557.552794][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.552856][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.601961][T10335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1144'. [ 559.984347][ T31] audit: type=1400 audit(1790538608.999:3225): avc: denied { name_bind } for pid=10350 comm="syz.3.1134" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 559.986066][ T31] audit: type=1400 audit(1790538608.999:3226): avc: denied { node_bind } for pid=10350 comm="syz.3.1134" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 560.008521][ T31] audit: type=1400 audit(1790538609.009:3227): avc: denied { ioctl } for pid=10350 comm="syz.3.1134" path="socket:[24363]" dev="sockfs" ino=24363 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.008573][ T31] audit: type=1400 audit(1790538609.009:3228): avc: denied { create } for pid=10350 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 560.065280][T10355] netlink: 'syz.3.1134': attribute type 49 has an invalid length. [ 560.168939][ T31] audit: type=1400 audit(1790538609.189:3229): avc: denied { sys_module } for pid=10350 comm="syz.3.1134" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 560.244975][ T31] audit: type=1400 audit(1790538609.259:3230): avc: denied { create } for pid=10358 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 560.260589][ T31] audit: type=1400 audit(1790538609.269:3231): avc: denied { setopt } for pid=10358 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 560.583782][T10366] overlayfs: overlapping lowerdir path [ 560.664273][ T31] audit: type=1400 audit(1790538609.679:3232): avc: denied { read write } for pid=10371 comm="syz.1.1154" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 560.665626][T10370] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1146'. [ 561.921634][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1156'. [ 562.509207][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 562.509224][ T31] audit: type=1400 audit(1790538611.529:3239): avc: denied { setopt } for pid=10405 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 562.686747][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1170'. [ 563.432896][ T31] audit: type=1400 audit(1790538612.449:3240): avc: denied { nlmsg_read } for pid=10413 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 563.433494][T10414] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1171'. [ 563.773941][T10426] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1178'. [ 563.886369][T10435] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 564.106363][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1182'. [ 564.794835][ T31] audit: type=1400 audit(1790538613.809:3241): avc: denied { read write } for pid=10444 comm="syz.0.1185" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 564.795060][ T31] audit: type=1400 audit(1790538613.809:3242): avc: denied { open } for pid=10444 comm="syz.0.1185" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 564.953053][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 565.129330][ T31] audit: type=1400 audit(1790538614.149:3243): avc: denied { append } for pid=10447 comm="syz.1.1187" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 565.129808][T10456] syz.1.1187: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 565.129859][T10456] CPU: 1 UID: 0 PID: 10456 Comm: syz.1.1187 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.129887][T10456] Tainted: [L]=SOFTLOCKUP [ 565.129895][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 565.129908][T10456] Call Trace: [ 565.129915][T10456] [ 565.129922][T10456] dump_stack_lvl+0x100/0x190 [ 565.129946][T10456] warn_alloc.cold+0x9e/0xb2 [ 565.129961][T10456] ? __pfx_warn_alloc+0x10/0x10 [ 565.129975][T10456] ? avc_has_extended_perms+0x201/0x1080 [ 565.129996][T10456] ? avc_has_extended_perms+0x33a/0x1080 [ 565.130013][T10456] ? avc_has_extended_perms+0x33a/0x1080 [ 565.130036][T10456] __vmalloc_node_range_noprof+0x123b/0x1420 [ 565.130056][T10456] ? rcu_is_watching+0x13/0xc0 [ 565.130083][T10456] ? trace_contention_end+0x126/0x160 [ 565.130113][T10456] ? dvb_demux_do_ioctl+0x929/0x1200 [ 565.130136][T10456] ? kasan_quarantine_put+0x104/0x240 [ 565.130155][T10456] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 565.130171][T10456] ? __pfx___mutex_lock+0x10/0x10 [ 565.130185][T10456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 565.130208][T10456] ? tomoyo_path_number_perm+0x188/0x580 [ 565.130227][T10456] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 565.130241][T10456] __vmalloc_node_noprof+0xad/0xf0 [ 565.130259][T10456] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 565.130275][T10456] dvb_demux_do_ioctl+0x9e0/0x1200 [ 565.130291][T10456] ? do_vfs_ioctl+0x226/0x13e0 [ 565.130306][T10456] dvb_usercopy+0x167/0x340 [ 565.130318][T10456] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 565.130332][T10456] ? __pfx_dvb_usercopy+0x10/0x10 [ 565.130343][T10456] ? __fget_files+0x34/0x3d0 [ 565.130365][T10456] ? selinux_file_ioctl+0x13b/0x290 [ 565.130380][T10456] ? selinux_file_ioctl+0xb6/0x290 [ 565.130395][T10456] dvb_demux_ioctl+0x29/0x40 [ 565.130407][T10456] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 565.130420][T10456] __x64_sys_ioctl+0x18e/0x210 [ 565.130434][T10456] do_syscall_64+0x123/0x790 [ 565.130448][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.130461][T10456] RIP: 0033:0x7f41a579e159 [ 565.130471][T10456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.130482][T10456] RSP: 002b:00007f41a66b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.130494][T10456] RAX: ffffffffffffffda RBX: 00007f41a5a26180 RCX: 00007f41a579e159 [ 565.130501][T10456] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 565.130508][T10456] RBP: 00007f41a583506b R08: 0000000000000000 R09: 0000000000000000 [ 565.130515][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.130522][T10456] R13: 00007f41a5a26218 R14: 00007f41a5a26180 R15: 00007ffcc166fed8 [ 565.130539][T10456] [ 565.130553][T10456] Mem-Info: [ 565.130560][T10456] active_anon:62095 inactive_anon:275 isolated_anon:0 [ 565.130560][T10456] active_file:5037 inactive_file:57425 isolated_file:0 [ 565.130560][T10456] unevictable:1161 dirty:532 writeback:0 [ 565.130560][T10456] slab_reclaimable:9848 slab_unreclaimable:103310 [ 565.130560][T10456] mapped:37537 shmem:56684 pagetables:1392 [ 565.130560][T10456] sec_pagetables:0 bounce:0 [ 565.130560][T10456] kernel_misc_reclaimable:0 [ 565.130560][T10456] free:1219063 free_pcp:26304 free_cma:0 [ 565.130591][T10456] Node 0 active_anon:245324kB inactive_anon:684kB active_file:20148kB inactive_file:229416kB unevictable:2532kB isolated(anon):0kB isolated(file):0kB mapped:150124kB dirty:2124kB writeback:0kB shmem:221152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12228kB pagetables:5440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 565.130623][T10456] Node 1 active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:5584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 565.130652][T10456] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.130683][T10456] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 565.130709][T10456] Node 0 DMA32 free:923488kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:245324kB inactive_anon:684kB active_file:20148kB inactive_file:229416kB unevictable:2532kB writepending:2124kB zspages:848kB present:3129332kB managed:2530392kB mlocked:0kB bounce:0kB free_pcp:101728kB local_pcp:20564kB free_cma:0kB [ 565.130745][T10456] lowmem_reserve[]: 0 0 0 0 0 [ 565.130764][T10456] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.130796][T10456] lowmem_reserve[]: 0 0 0 0 0 [ 565.130816][T10456] Node 1 Normal free:3937404kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3488kB local_pcp:0kB free_cma:0kB [ 565.130858][T10456] lowmem_reserve[]: 0 0 0 0 0 [ 565.130891][T10456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 565.130969][T10456] Node 0 DMA32: 1841*4kB (UM) 1573*8kB (UME) 107*16kB (UME) 258*32kB (UME) 91*64kB (UME) 86*128kB (ME) 7*256kB (UE) 31*512kB (ME) 17*1024kB (UME) 11*2048kB (UM) 200*4096kB (UM) = 923548kB [ 565.131057][T10456] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 565.131111][T10456] Node 1 Normal: 5*4kB (UM) 9*8kB (U) 4*16kB (U) 3*32kB (U) 10*64kB (UM) 8*128kB (U) 5*256kB (UM) 2*512kB (UM) 1*1024kB (M) 4*2048kB (UM) 958*4096kB (UM) = 3937404kB [ 565.131200][T10456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.131209][T10456] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.131309][T10456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.132878][T10456] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.132917][T10456] 119123 total pagecache pages [ 565.132923][T10456] 0 pages in swap cache [ 565.132928][T10456] Free swap = 123500kB [ 565.132932][T10456] Total swap = 124996kB [ 565.132937][T10456] 2097051 pages RAM [ 565.132941][T10456] 0 pages HighMem/MovableOnly [ 565.132945][T10456] 432821 pages reserved [ 565.132950][T10456] 0 pages cma reserved [ 566.055197][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1191'. [ 567.500517][T10473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1196'. [ 568.726217][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1200'. [ 569.788505][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 569.820128][ T31] audit: type=1400 audit(1790538618.839:3244): avc: denied { create } for pid=10494 comm="syz.3.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 569.872831][ T31] audit: type=1400 audit(1790538618.889:3245): avc: denied { getopt } for pid=10494 comm="syz.3.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 570.040919][ T31] audit: type=1400 audit(1790538619.059:3246): avc: denied { create } for pid=10498 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 570.074462][ T31] audit: type=1400 audit(1790538619.089:3247): avc: denied { setopt } for pid=10498 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 570.182245][ T31] audit: type=1400 audit(1790538619.199:3248): avc: denied { write } for pid=10500 comm="syz.3.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 570.182530][ T31] audit: type=1400 audit(1790538619.199:3249): avc: denied { name_connect } for pid=10500 comm="syz.3.1206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 570.448813][ T31] audit: type=1400 audit(1790538619.469:3250): avc: denied { read } for pid=10506 comm="syz.3.1209" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 570.448858][ T31] audit: type=1400 audit(1790538619.469:3251): avc: denied { open } for pid=10506 comm="syz.3.1209" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 570.501991][ T31] audit: type=1400 audit(1790538619.519:3252): avc: denied { ioctl } for pid=10506 comm="syz.3.1209" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 570.525194][ T31] audit: type=1400 audit(1790538619.539:3253): avc: denied { getopt } for pid=10509 comm="syz.2.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 570.527614][T10510] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 570.527614][T10510] Please contact the netfilter-devel mailing list or update your nftables rules. [ 570.916267][T10532] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 571.221534][T10549] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 571.551059][T10566] netlink: 'syz.2.1234': attribute type 49 has an invalid length. [ 571.723795][T10585] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 572.053750][T10605] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 573.979416][T10656] bond_slave_0: entered promiscuous mode [ 573.979442][T10656] bond_slave_0: entered allmulticast mode [ 574.209656][T10668] random: crng reseeded on system resumption [ 574.932710][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 574.932726][ T31] audit: type=1400 audit(1790538623.949:3267): avc: denied { mount } for pid=10700 comm="syz.4.1293" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 574.935008][ T31] audit: type=1400 audit(1790538623.949:3268): avc: denied { mount } for pid=10700 comm="syz.4.1293" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 575.547054][T10723] openvswitch: netlink: Message has 1 unknown bytes. [ 575.547084][T10723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.658919][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1296'. [ 575.880192][ T31] audit: type=1400 audit(1790538624.899:3269): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 575.916534][ T31] audit: type=1400 audit(1790538624.929:3270): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 576.258263][ T31] audit: type=1400 audit(1790538625.279:3271): avc: denied { write } for pid=10741 comm="syz.1.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 576.479953][ T31] audit: type=1400 audit(1790538625.499:3272): avc: denied { getopt } for pid=10745 comm="syz.4.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 576.596458][ T31] audit: type=1400 audit(1790538625.609:3273): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 577.303563][T10739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 577.841265][ T31] audit: type=1400 audit(1790538626.859:3274): avc: denied { listen } for pid=10769 comm="syz.1.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 578.794018][ T31] audit: type=1400 audit(1790538627.809:3275): avc: denied { ioctl } for pid=10786 comm="syz.4.1331" path="socket:[26739]" dev="sockfs" ino=26739 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 578.954857][T10793] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 579.266740][ T5726] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 579.428377][ T5726] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=32.00 [ 579.435970][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.436057][ T5726] usb 4-1: Product: syz [ 579.436104][ T5726] usb 4-1: Manufacturer: syz [ 579.436155][ T5726] usb 4-1: SerialNumber: syz [ 579.486071][ T5726] usb 4-1: config 0 descriptor?? [ 579.522550][ T5726] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 579.550953][ T5726] usb 4-1: Detected FT233HP [ 579.835054][ T5726] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 579.853728][ T5726] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 580.189313][ T5726] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 580.263100][ T5726] usb 4-1: USB disconnect, device number 18 [ 580.284690][ T5726] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 580.298790][ T5726] ftdi_sio 4-1:0.0: device disconnected [ 580.578758][T10819] netlink: 'syz.0.1341': attribute type 49 has an invalid length. [ 580.962266][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1347'. [ 581.880129][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1320'. [ 581.964793][T10837] overlay: Unknown parameter '/et/netlink' [ 582.382659][T10846] MTDSB: Device #1 doesn't appear to exist [ 582.382659][T10846] [ 582.555273][ T31] audit: type=1400 audit(1790538631.569:3276): avc: denied { ioctl } for pid=10848 comm="syz.3.1354" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 582.772185][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 582.772215][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 582.998464][T10859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1358'. [ 583.746100][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 584.098066][T10881] vers=2.0 not permitted when mounting with smb3 [ 584.098066][T10881] [ 584.098295][T10881] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 584.196882][T10883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.984818][T10916] syz.3.1380: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 584.985008][T10916] CPU: 0 UID: 0 PID: 10916 Comm: syz.3.1380 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.985036][T10916] Tainted: [L]=SOFTLOCKUP [ 584.985043][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 584.985057][T10916] Call Trace: [ 584.985064][T10916] [ 584.985073][T10916] dump_stack_lvl+0x100/0x190 [ 584.985112][T10916] warn_alloc.cold+0x9e/0xb2 [ 584.985140][T10916] ? __pfx_warn_alloc+0x10/0x10 [ 584.985166][T10916] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.985205][T10916] __vmalloc_node_range_noprof+0x123b/0x1420 [ 584.985237][T10916] ? rcu_is_watching+0x13/0xc0 [ 584.985266][T10916] ? trace_contention_end+0x126/0x160 [ 584.985294][T10916] ? dvb_demux_do_ioctl+0x929/0x1200 [ 584.985320][T10916] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 584.985347][T10916] ? __pfx___mutex_lock+0x10/0x10 [ 584.985369][T10916] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.985399][T10916] ? irqentry_exit+0x24d/0xa10 [ 584.985421][T10916] ? irqentry_exit+0x24d/0xa10 [ 584.985446][T10916] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 584.985470][T10916] __vmalloc_node_noprof+0xad/0xf0 [ 584.985506][T10916] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 584.985536][T10916] dvb_demux_do_ioctl+0x9e0/0x1200 [ 584.985574][T10916] dvb_usercopy+0x167/0x340 [ 584.985596][T10916] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 584.985623][T10916] ? __pfx_dvb_usercopy+0x10/0x10 [ 584.985643][T10916] ? __fget_files+0x34/0x3d0 [ 584.985684][T10916] ? selinux_file_ioctl+0x13b/0x290 [ 584.985710][T10916] ? selinux_file_ioctl+0xb6/0x290 [ 584.985739][T10916] dvb_demux_ioctl+0x29/0x40 [ 584.985760][T10916] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 584.985782][T10916] __x64_sys_ioctl+0x18e/0x210 [ 584.985808][T10916] do_syscall_64+0x123/0x790 [ 584.985833][T10916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.985854][T10916] RIP: 0033:0x7f2d7c59e159 [ 584.985872][T10916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.985892][T10916] RSP: 002b:00007f2d7d407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.985912][T10916] RAX: ffffffffffffffda RBX: 00007f2d7c826180 RCX: 00007f2d7c59e159 [ 584.985933][T10916] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 584.985947][T10916] RBP: 00007f2d7c63506b R08: 0000000000000000 R09: 0000000000000000 [ 584.985960][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.985973][T10916] R13: 00007f2d7c826218 R14: 00007f2d7c826180 R15: 00007ffee00f59d8 [ 584.986006][T10916] [ 584.986068][T10916] Mem-Info: [ 584.986155][T10916] active_anon:46326 inactive_anon:275 isolated_anon:0 [ 584.986155][T10916] active_file:5037 inactive_file:57433 isolated_file:0 [ 584.986155][T10916] unevictable:1161 dirty:347 writeback:0 [ 584.986155][T10916] slab_reclaimable:10036 slab_unreclaimable:103659 [ 584.986155][T10916] mapped:43528 shmem:40339 pagetables:1447 [ 584.986155][T10916] sec_pagetables:0 bounce:0 [ 584.986155][T10916] kernel_misc_reclaimable:0 [ 584.986155][T10916] free:1225558 free_pcp:35193 free_cma:0 [ 584.986267][T10916] Node 0 active_anon:182248kB inactive_anon:684kB active_file:20148kB inactive_file:229448kB unevictable:2532kB isolated(anon):0kB isolated(file):0kB mapped:174040kB dirty:1388kB writeback:0kB shmem:155772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12400kB pagetables:5660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 584.986351][T10916] Node 1 active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:5584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 584.986441][T10916] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.986610][T10916] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 584.986779][T10916] Node 0 DMA32 free:945980kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:182248kB inactive_anon:684kB active_file:20148kB inactive_file:229448kB unevictable:2532kB writepending:1388kB zspages:848kB present:3129332kB managed:2530392kB mlocked:0kB bounce:0kB free_pcp:140772kB local_pcp:29072kB free_cma:0kB [ 584.986894][T10916] lowmem_reserve[]: 0 0 0 0 0 [ 585.015426][T10916] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.015564][T10916] lowmem_reserve[]: 0 0 0 0 0 [ 585.015918][T10916] Node 1 Normal free:3940892kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.016050][T10916] lowmem_reserve[]: 0 0 0 0 0 [ 585.016370][T10916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 585.017177][T10916] Node 0 DMA32: 23*4kB (UM) 38*8kB (ME) 53*16kB (ME) 79*32kB (UME) 38*64kB (UME) 182*128kB (ME) 126*256kB (UME) 61*512kB (ME) 19*1024kB (UME) 9*2048kB (UM) 199*4096kB (UM) = 945980kB [ 585.043780][T10916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 585.059377][T10916] Node 1 Normal: 5*4kB (UM) 9*8kB (U) 4*16kB (U) 4*32kB (UM) 10*64kB (UM) 9*128kB (UM) 4*256kB (U) 1*512kB (U) 1*1024kB (M) 2*2048kB (U) 960*4096kB (UM) = 3940892kB [ 585.078046][T10916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.078076][T10916] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 585.078131][T10916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.078160][T10916] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 585.078177][T10916] 102661 total pagecache pages [ 585.078184][T10916] 0 pages in swap cache [ 585.078227][T10916] Free swap = 123500kB [ 585.078267][T10916] Total swap = 124996kB [ 585.078313][T10916] 2097051 pages RAM [ 585.078352][T10916] 0 pages HighMem/MovableOnly [ 585.078398][T10916] 432821 pages reserved [ 585.078406][T10916] 0 pages cma reserved [ 585.915510][ T31] audit: type=1400 audit(1790538634.929:3277): avc: denied { write } for pid=10920 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 586.274026][T10930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1388'. [ 586.598560][ T31] audit: type=1400 audit(1790538635.619:3278): avc: denied { append } for pid=10940 comm="syz.4.1395" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 586.649819][ T31] audit: type=1400 audit(1790538635.669:3279): avc: denied { ioctl } for pid=10940 comm="syz.4.1395" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 587.219984][ T31] audit: type=1400 audit(1790538636.239:3280): avc: denied { read } for pid=10963 comm="syz.4.1401" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 587.220335][ T31] audit: type=1400 audit(1790538636.239:3281): avc: denied { open } for pid=10963 comm="syz.4.1401" path="/dev/input/event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 587.224896][ T31] audit: type=1400 audit(1790538636.239:3282): avc: denied { ioctl } for pid=10963 comm="syz.4.1401" path="/dev/input/event2" dev="devtmpfs" ino=920 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 587.509019][ T31] audit: type=1400 audit(1790538636.529:3283): avc: denied { setopt } for pid=10971 comm="syz.3.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 587.716310][ T31] audit: type=1400 audit(1790538636.729:3284): avc: denied { accept } for pid=10976 comm="syz.0.1408" lport=45207 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.867164][ T31] audit: type=1400 audit(1790538636.889:3285): avc: denied { create } for pid=10981 comm="syz.3.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 587.898411][ T31] audit: type=1400 audit(1790538636.919:3286): avc: denied { write } for pid=10983 comm="syz.0.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 587.900202][ T31] audit: type=1400 audit(1790538636.919:3287): avc: denied { setopt } for pid=10981 comm="syz.3.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 588.233507][T10997] netlink: 'syz.3.1418': attribute type 1 has an invalid length. [ 588.384707][ T31] audit: type=1400 audit(1790538637.399:3288): avc: denied { ioctl } for pid=10998 comm="syz.4.1417" path="socket:[26427]" dev="sockfs" ino=26427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 588.400372][ T31] audit: type=1400 audit(1790538637.409:3289): avc: denied { read } for pid=11001 comm="syz.3.1420" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 588.400918][ T31] audit: type=1400 audit(1790538637.409:3290): avc: denied { open } for pid=11001 comm="syz.3.1420" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 588.407124][ T31] audit: type=1400 audit(1790538637.409:3291): avc: denied { ioctl } for pid=11001 comm="syz.3.1420" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 588.770296][ T31] audit: type=1400 audit(1790538637.789:3292): avc: denied { read write } for pid=11014 comm="syz.4.1424" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 588.776212][ T31] audit: type=1400 audit(1790538637.789:3293): avc: denied { open } for pid=11014 comm="syz.4.1424" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 588.947463][T11019] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 589.944307][T11036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1426'. [ 590.055275][T11052] ip_tables: iptables: counters copy to user failed while replacing table [ 590.119600][T11054] kAFS: No cell specified [ 590.338840][T11061] overlay: Unknown parameter '/et/netlink' [ 592.784384][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 592.784399][ T31] audit: type=1400 audit(1790538641.799:3300): avc: denied { mount } for pid=11110 comm="syz.3.1463" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 592.819220][ T31] audit: type=1400 audit(1790538641.839:3301): avc: denied { mounton } for pid=11110 comm="syz.3.1463" path="/294/proc/942/task/943/fail-nth" dev="proc" ino=27197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 593.451136][ T31] audit: type=1400 audit(1790538642.469:3302): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 593.485547][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1458'. [ 593.828665][T11120] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1467'. [ 593.828694][T11120] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 594.145959][ T31] audit: type=1400 audit(1790538643.159:3303): avc: denied { mounton } for pid=11130 comm="syz.0.1471" path="/260/file0" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 594.145997][T11132] bad cache= option: none§±Sñ:) [ 594.145997][T11132] [ 594.146265][T11132] CIFS: VFS: bad cache= option: none§±Sñ:) [ 594.909469][T11137] misc userio: The device must be registered before sending interrupts [ 596.339203][T11163] netlink: 'syz.1.1482': attribute type 11 has an invalid length. [ 596.809868][T11178] syz.4.1487: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 596.810183][T11178] CPU: 0 UID: 0 PID: 11178 Comm: syz.4.1487 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.810213][T11178] Tainted: [L]=SOFTLOCKUP [ 596.810221][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 596.810233][T11178] Call Trace: [ 596.810240][T11178] [ 596.810248][T11178] dump_stack_lvl+0x100/0x190 [ 596.810280][T11178] warn_alloc.cold+0x9e/0xb2 [ 596.810295][T11178] ? __pfx_warn_alloc+0x10/0x10 [ 596.810309][T11178] ? rcu_is_watching+0x13/0xc0 [ 596.810327][T11178] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 596.810350][T11178] __vmalloc_node_range_noprof+0x123b/0x1420 [ 596.810368][T11178] ? rcu_is_watching+0x13/0xc0 [ 596.810383][T11178] ? trace_contention_end+0x126/0x160 [ 596.810400][T11178] ? dvb_demux_do_ioctl+0x929/0x1200 [ 596.810414][T11178] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 596.810430][T11178] ? __pfx___mutex_lock+0x10/0x10 [ 596.810445][T11178] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.810468][T11178] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 596.810482][T11178] __vmalloc_node_noprof+0xad/0xf0 [ 596.810498][T11178] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 596.810514][T11178] dvb_demux_do_ioctl+0x9e0/0x1200 [ 596.810530][T11178] ? do_vfs_ioctl+0x226/0x13e0 [ 596.810546][T11178] dvb_usercopy+0x167/0x340 [ 596.810558][T11178] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 596.810572][T11178] ? __pfx_dvb_usercopy+0x10/0x10 [ 596.810591][T11178] ? selinux_file_ioctl+0x13b/0x290 [ 596.810606][T11178] ? selinux_file_ioctl+0xb6/0x290 [ 596.810622][T11178] dvb_demux_ioctl+0x29/0x40 [ 596.810633][T11178] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 596.810646][T11178] __x64_sys_ioctl+0x18e/0x210 [ 596.810660][T11178] do_syscall_64+0x123/0x790 [ 596.810675][T11178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.810688][T11178] RIP: 0033:0x7fc5d339e159 [ 596.810698][T11178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.810709][T11178] RSP: 002b:00007fc5d4242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.810720][T11178] RAX: ffffffffffffffda RBX: 00007fc5d3626180 RCX: 00007fc5d339e159 [ 596.810728][T11178] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 596.810736][T11178] RBP: 00007fc5d343506b R08: 0000000000000000 R09: 0000000000000000 [ 596.810743][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.810750][T11178] R13: 00007fc5d3626218 R14: 00007fc5d3626180 R15: 00007ffc4824dca8 [ 596.810769][T11178] [ 596.810880][T11178] Mem-Info: [ 596.810891][T11178] active_anon:34903 inactive_anon:275 isolated_anon:0 [ 596.810891][T11178] active_file:5037 inactive_file:57436 isolated_file:0 [ 596.810891][T11178] unevictable:1161 dirty:491 writeback:0 [ 596.810891][T11178] slab_reclaimable:9599 slab_unreclaimable:103966 [ 596.810891][T11178] mapped:34443 shmem:28916 pagetables:1427 [ 596.810891][T11178] sec_pagetables:0 bounce:0 [ 596.810891][T11178] kernel_misc_reclaimable:0 [ 596.810891][T11178] free:1246689 free_pcp:23874 free_cma:0 [ 596.811021][T11178] Node 0 active_anon:136556kB inactive_anon:684kB active_file:20148kB inactive_file:229460kB unevictable:2532kB isolated(anon):0kB isolated(file):0kB mapped:137768kB dirty:1964kB writeback:0kB shmem:110080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12508kB pagetables:5580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 596.811141][T11178] Node 1 active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:5584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 596.811273][T11178] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.811502][T11178] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 596.811947][T11178] Node 0 DMA32 free:1030504kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:136556kB inactive_anon:684kB active_file:20148kB inactive_file:229460kB unevictable:2532kB writepending:1964kB zspages:848kB present:3129332kB managed:2530392kB mlocked:0kB bounce:0kB free_pcp:95496kB local_pcp:53080kB free_cma:0kB [ 596.812105][T11178] lowmem_reserve[]: 0 0 0 0 0 [ 596.812572][T11178] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.812815][T11178] lowmem_reserve[]: 0 0 0 0 0 [ 596.813264][T11178] Node 1 Normal free:3940892kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3056kB inactive_anon:416kB active_file:0kB inactive_file:284kB unevictable:2112kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.813568][T11178] lowmem_reserve[]: 0 0 0 0 0 [ 596.814039][T11178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 596.814943][T11178] Node 0 DMA32: 2280*4kB (M) 553*8kB (UME) 830*16kB (UME) 731*32kB (ME) 339*64kB (ME) 335*128kB (UME) 131*256kB (UME) 61*512kB (UME) 21*1024kB (UME) 9*2048kB (UM) 198*4096kB (UM) = 1030504kB [ 596.816304][T11178] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 596.831644][T11178] Node 1 Normal: 5*4kB (UM) 9*8kB (U) 4*16kB (U) 4*32kB (UM) 10*64kB (UM) 9*128kB (UM) 4*256kB (U) 1*512kB (U) 1*1024kB (M) 2*2048kB (U) 960*4096kB (UM) = 3940892kB [ 596.849033][T11178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.849103][T11178] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 596.849197][T11178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.849258][T11178] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.849319][T11178] 91367 total pagecache pages [ 596.849376][T11178] 0 pages in swap cache [ 596.849424][T11178] Free swap = 123500kB [ 596.849495][T11178] Total swap = 124996kB [ 596.849562][T11178] 2097051 pages RAM [ 596.849671][T11178] 0 pages HighMem/MovableOnly [ 596.849807][T11178] 432821 pages reserved [ 596.849864][T11178] 0 pages cma reserved [ 597.847359][ T31] audit: type=1400 audit(1790538646.869:3304): avc: denied { write } for pid=11195 comm="syz.1.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 598.087346][ T5726] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 598.183174][ T31] audit: type=1400 audit(1790538647.199:3305): avc: denied { listen } for pid=11211 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 598.251754][ T31] audit: type=1400 audit(1790538647.269:3306): avc: denied { connect } for pid=11215 comm="syz.4.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 598.279471][ T5726] usb 1-1: unable to get BOS descriptor or descriptor too short [ 598.279512][ T5726] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 598.280854][ T5726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.280876][ T5726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.284670][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.284692][ T5726] usb 1-1: Product: syz [ 598.284705][ T5726] usb 1-1: Manufacturer: syz [ 598.284720][ T5726] usb 1-1: SerialNumber: syz [ 598.341089][T11218] raw_sendmsg: syz.1.1506 forgot to set AF_INET. Fix it! [ 598.369884][ T5726] usb 1-1: selecting invalid altsetting 1 [ 598.370564][ T5726] usb 1-1: unit 6 not found! [ 598.710087][ T31] audit: type=1400 audit(1790538647.729:3307): avc: denied { read } for pid=11237 comm="syz.1.1516" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 598.710480][ T31] audit: type=1400 audit(1790538647.729:3308): avc: denied { open } for pid=11237 comm="syz.1.1516" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 598.765012][ T31] audit: type=1400 audit(1790538647.759:3309): avc: denied { ioctl } for pid=11237 comm="syz.1.1516" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 598.766977][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 598.809684][ T31] audit: type=1400 audit(1790538647.829:3310): avc: denied { create } for pid=11240 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.813029][ T31] audit: type=1400 audit(1790538647.829:3311): avc: denied { connect } for pid=11240 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.893324][ T31] audit: type=1400 audit(1790538647.909:3312): avc: denied { ioctl } for pid=11242 comm="syz.1.1518" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 598.921440][ T31] audit: type=1400 audit(1790538647.919:3313): avc: denied { connect } for pid=11244 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 598.927735][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.928916][ T9] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.928943][ T9] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 598.928967][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 598.931843][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.931866][ T9] usb 5-1: Product: syz [ 598.931880][ T9] usb 5-1: Manufacturer: syz [ 598.931894][ T9] usb 5-1: SerialNumber: syz [ 598.934778][ T9] usb 5-1: config 0 descriptor?? [ 598.936985][T11227] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 599.029765][ T5726] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 599.127937][ T5726] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 599.132875][ T9] usb 5-1: selecting invalid altsetting 0 [ 599.137105][ T5726] usb 1-1: USB disconnect, device number 28 [ 599.210562][T10777] udevd[10777]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.335803][ T9] usb 5-1: USB disconnect, device number 15 [ 599.440205][T10798] udevd[10798]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.445063][T11260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1526'. [ 599.846766][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'. [ 601.274927][T11301] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 601.276826][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 601.431564][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 601.431597][ T9] usb 4-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 601.432651][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.432676][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 601.432719][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.593653][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1548'. [ 602.253540][ T9] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:d970) [ 602.253670][ T9] uvcvideo 4-1:1.0: No valid video chain found. [ 602.290491][T11309] pim6reg: entered allmulticast mode [ 602.305178][T11309] pim6reg: left allmulticast mode [ 602.331072][ T9] usb 4-1: USB disconnect, device number 19 [ 602.679683][T11325] tipc: Started in network mode [ 602.679716][T11325] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 602.679762][T11325] tipc: Enabling of bearer rejected, failed to enable media [ 602.816920][ T988] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 602.968644][ T988] usb 2-1: Using ep0 maxpacket: 16 [ 602.974821][ T988] usb 2-1: unable to get BOS descriptor or descriptor too short [ 602.974865][ T988] usb 2-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 602.975778][ T988] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 602.975802][ T988] usb 2-1: config 1 has no interface number 0 [ 602.975836][ T988] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 602.975877][ T988] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 602.984365][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.984392][ T988] usb 2-1: Product: syz [ 602.984407][ T988] usb 2-1: Manufacturer: syz [ 602.984423][ T988] usb 2-1: SerialNumber: syz [ 603.046807][T11343] ip_tables: iptables: counters copy to user failed while replacing table [ 603.051250][T11344] overlayfs: conflicting options: userxattr,redirect_dir=on [ 603.251928][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 603.251945][ T31] audit: type=1400 audit(1790538652.269:3317): avc: denied { setopt } for pid=11352 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 603.328368][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'. [ 603.742977][ T988] usb 2-1: USB disconnect, device number 7 [ 603.875162][T11259] udevd[11259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.076974][ T31] audit: type=1400 audit(1790538653.099:3318): avc: denied { setopt } for pid=11397 comm="syz.0.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 604.077687][ T31] audit: type=1400 audit(1790538653.099:3319): avc: denied { connect } for pid=11397 comm="syz.0.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 604.142048][ T31] audit: type=1400 audit(1790538653.159:3320): avc: denied { create } for pid=11401 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.144660][ T31] audit: type=1400 audit(1790538653.159:3321): avc: denied { connect } for pid=11401 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.145157][ T31] audit: type=1400 audit(1790538653.159:3322): avc: denied { ioctl } for pid=11401 comm="syz.3.1585" path="socket:[28142]" dev="sockfs" ino=28142 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.320442][ T31] audit: type=1400 audit(1790538653.339:3323): avc: denied { name_bind } for pid=11409 comm="syz.2.1593" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 604.323028][T11408] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 604.323049][T11408] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1588'. [ 604.323080][T11408] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.1588'. [ 604.396378][T11415] tipc: Enabling of bearer rejected, failed to enable media [ 604.508296][ T31] audit: type=1400 audit(1790538653.529:3324): avc: denied { getopt } for pid=11422 comm="syz.2.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 604.756412][T11436] tipc: Started in network mode [ 604.756441][T11436] tipc: Node identity d2d04fc84363, cluster identity 4711 [ 604.772003][T11436] tipc: Enabled bearer , priority 21 [ 605.655233][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1594'. [ 605.761590][ T9] tipc: Node number set to 2444447688 [ 606.355286][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1618'. [ 606.859413][ T31] audit: type=1400 audit(1790538655.879:3325): avc: denied { ioctl } for pid=11503 comm="syz.2.1629" path="socket:[28337]" dev="sockfs" ino=28337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 606.863647][ T31] audit: type=1400 audit(1790538655.879:3326): avc: denied { write } for pid=11503 comm="syz.2.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 607.532572][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1624'. [ 607.600152][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 607.747589][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 607.750576][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.750604][ T9] usb 5-1: Product: syz [ 607.750620][ T9] usb 5-1: Manufacturer: syz [ 607.750636][ T9] usb 5-1: SerialNumber: syz [ 607.754322][ T9] usb 5-1: config 0 descriptor?? [ 608.055062][T11521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1637'. [ 608.055131][T11521] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 608.340908][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 608.340926][ T31] audit: type=1400 audit(1790538657.359:3328): avc: denied { lock } for pid=11536 comm="syz.2.1644" path="socket:[28394]" dev="sockfs" ino=28394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 608.446397][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 608.446423][ T9] usb 5-1: Please update to version 0.2 or newer [ 608.583153][ T9] usb 5-1: USB disconnect, device number 16 [ 609.887503][ T988] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 609.888787][ T31] audit: type=1400 audit(1790538658.909:3329): avc: denied { read } for pid=5266 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 609.958719][ T31] audit: type=1400 audit(1790538658.979:3330): avc: denied { setopt } for pid=11551 comm="syz.4.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 610.037884][ T988] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 610.039015][ T988] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.039073][ T988] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.039099][ T988] usb 4-1: config 0 interface 0 has no altsetting 0 [ 610.039129][ T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.049736][ T988] usb 4-1: config 0 descriptor?? [ 610.127896][ T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 610.174998][ T31] audit: type=1400 audit(1790538659.189:3331): avc: denied { connect } for pid=11575 comm="syz.4.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 610.202231][ T31] audit: type=1400 audit(1790538659.219:3332): avc: denied { write } for pid=11575 comm="syz.4.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 610.463455][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 610.571634][ T30] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 610.658790][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658815][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658831][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658846][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658860][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658882][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658897][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658912][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658927][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.658941][ T988] apple 0003:05AC:025B.0005: unknown main item tag 0x0 [ 610.831467][ T988] apple 0003:05AC:025B.0005: hidraw0: USB HID v80.80 Device [HID 05ac:025b] on usb-dummy_hcd.3-1/input0 [ 610.842734][ T30] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 611.068648][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.068667][ T30] usb 2-1: Product: syz [ 611.068676][ T30] usb 2-1: Manufacturer: syz [ 611.068685][ T30] usb 2-1: SerialNumber: syz [ 611.110283][ T30] usb 2-1: config 0 descriptor?? [ 611.186711][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 611.233152][ T30] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 611.233597][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 611.260115][ T988] usb 4-1: USB disconnect, device number 20 [ 611.309350][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 611.346817][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 611.347502][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 611.348443][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 611.348467][ T9] usb 5-1: config 0 has no interface number 0 [ 611.350710][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.350732][ T9] usb 5-1: Product: syz [ 611.350747][ T9] usb 5-1: Manufacturer: syz [ 611.350762][ T9] usb 5-1: SerialNumber: syz [ 611.509384][ T31] audit: type=1400 audit(1790538660.529:3333): avc: denied { append } for pid=11561 comm="syz.1.1654" name="i2c-1" dev="devtmpfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 611.510097][T11562] cxusb: i2c wr: len=80 is too big! [ 611.510097][T11562] [ 611.556322][ T30] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 611.556372][ T30] usb 2-1: media controller created [ 611.635137][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.703265][ T9] usb 5-1: config 0 descriptor?? [ 611.715210][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 611.918387][ T30] usb 2-1: selecting invalid altsetting 7 [ 611.918409][ T30] cxusb: set interface failed [ 611.918420][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 611.971295][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 611.998653][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 612.115938][ T30] DVB: Unable to find symbol lgdt330x_attach() [ 612.115956][ T30] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 612.397536][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 612.398050][ T9] usb 5-1: USB disconnect, device number 17 [ 612.398217][ T30] rc_core: IR keymap rc-dvico-portable not found [ 612.398230][ T30] Registered IR keymap rc-empty [ 613.143223][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 613.163673][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 613.164321][ T9] quatech2 5-1:0.51: device disconnected [ 613.307281][ T31] audit: type=1400 audit(1790538662.329:3334): avc: denied { write } for pid=11610 comm="syz.1.1671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 613.310274][ T30] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 613.327687][ T30] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input11 [ 613.516084][ T30] dvb-usb: schedule remote query interval to 100 msecs. [ 613.516108][ T30] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 613.555878][ T31] audit: type=1400 audit(1790538662.569:3335): avc: denied { read } for pid=4956 comm="acpid" name="event4" dev="devtmpfs" ino=3163 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 613.558927][ T5739] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 613.584495][ T31] audit: type=1400 audit(1790538662.589:3336): avc: denied { open } for pid=4956 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3163 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 613.584542][ T31] audit: type=1400 audit(1790538662.599:3337): avc: denied { ioctl } for pid=4956 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3163 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 613.598432][ T30] usb 2-1: USB disconnect, device number 8 [ 613.727658][ T5739] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 613.728616][ T5739] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 613.728647][ T5739] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.728670][ T5739] usb 4-1: config 2 interface 0 has no altsetting 0 [ 613.728697][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.210528][ T5739] elo 0003:04E7:0009.0006: item fetching failed at offset 4/5 [ 614.229358][ T5739] elo 0003:04E7:0009.0006: parse failed [ 614.229452][ T5739] elo 0003:04E7:0009.0006: probe with driver elo failed with error -22 [ 614.456134][ T30] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 614.511138][T11628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1679'. [ 614.511202][T11628] block nbd0: not configured, cannot reconfigure [ 614.535985][ T9] usb 4-1: USB disconnect, device number 21 [ 614.930877][T11635] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 616.190464][T11657] 0x000000000000-0x000000020000 : "" [ 616.279802][T11657] ftl_cs: FTL header not found. [ 616.611078][T11669] netlink: 'syz.0.1693': attribute type 10 has an invalid length. [ 616.630476][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.650532][T11669] team0: Port device netdevsim1 added [ 616.682340][T11669] netlink: 'syz.0.1693': attribute type 10 has an invalid length. [ 616.710721][T11669] team0: Port device netdevsim1 removed [ 616.714016][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.732064][T11669] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 617.130063][ T31] audit: type=1400 audit(1790538666.149:3338): avc: denied { search } for pid=5266 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.132667][ T31] audit: type=1400 audit(1790538666.149:3339): avc: denied { search } for pid=5266 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.132714][ T31] audit: type=1400 audit(1790538666.149:3340): avc: denied { search } for pid=5266 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.132752][ T31] audit: type=1400 audit(1790538666.149:3341): avc: denied { search } for pid=5266 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.132789][ T31] audit: type=1400 audit(1790538666.149:3342): avc: denied { search } for pid=5266 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.132827][ T31] audit: type=1400 audit(1790538666.149:3343): avc: denied { search } for pid=5266 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.273702][ T31] audit: type=1400 audit(1790538666.149:3344): avc: denied { read } for pid=5266 comm="dhcpcd" name="n38" dev="tmpfs" ino=5254 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 617.591728][T11686] xt_hashlimit: size too large, truncated to 1048576 [ 618.980375][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.980429][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.554248][T11731] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 619.615544][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 619.615562][ T31] audit: type=1400 audit(1790538668.629:3350): avc: denied { create } for pid=11733 comm="syz.3.1715" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 619.716236][ T31] audit: type=1400 audit(1790538668.729:3351): avc: denied { unlink } for pid=5618 comm="syz-executor" name="file1" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 619.847185][T11737] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1716'. [ 619.878029][ T31] audit: type=1400 audit(1790538668.899:3352): avc: denied { write } for pid=11688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.881194][ T31] audit: type=1400 audit(1790538668.899:3353): avc: denied { add_name } for pid=11688 comm="dhcpcd-run-hook" name="resolv.conf.geneve0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.882286][ T31] audit: type=1400 audit(1790538668.899:3354): avc: denied { create } for pid=11688 comm="dhcpcd-run-hook" name="resolv.conf.geneve0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.885348][ T31] audit: type=1400 audit(1790538668.899:3355): avc: denied { write } for pid=11688 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.geneve0.link" dev="tmpfs" ino=5270 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.885803][ T31] audit: type=1400 audit(1790538668.899:3356): avc: denied { append } for pid=11688 comm="dhcpcd-run-hook" name="resolv.conf.geneve0.link" dev="tmpfs" ino=5270 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.444376][ T5739] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 620.483381][ T31] audit: type=1400 audit(1790538669.499:3357): avc: denied { write } for pid=11751 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.483643][ T31] audit: type=1400 audit(1790538669.499:3358): avc: denied { remove_name } for pid=11751 comm="rm" name="resolv.conf.geneve0.link" dev="tmpfs" ino=5270 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.483863][ T31] audit: type=1400 audit(1790538669.499:3359): avc: denied { unlink } for pid=11751 comm="rm" name="resolv.conf.geneve0.link" dev="tmpfs" ino=5270 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.617617][ T5739] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 620.618734][ T5739] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 620.618766][ T5739] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.618792][ T5739] usb 2-1: config 0 interface 0 has no altsetting 0 [ 620.618822][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.623832][ T5739] usb 2-1: config 0 descriptor?? [ 620.624618][T11746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 621.171942][T11754] macsec1: entered promiscuous mode [ 621.171967][T11754] dummy0: entered promiscuous mode [ 621.172339][T11754] macsec1: entered allmulticast mode [ 621.172356][T11754] dummy0: entered allmulticast mode [ 621.515429][ T5338] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 621.565064][ T5739] hid_parser_main: 14 callbacks suppressed [ 621.565088][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.565116][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.565139][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.565161][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.565183][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.565206][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.565228][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.565250][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.637130][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.637167][ T5739] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 621.674587][ T5739] logitech 0003:046D:C626.0007: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.1-1/input0 [ 621.708290][ T5338] usb 4-1: Using ep0 maxpacket: 32 [ 621.709547][ T5338] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 621.712159][ T5338] usb 4-1: config 0 interface 0 has no altsetting 0 [ 621.712196][ T5338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.714766][ T5338] usb 4-1: config 0 descriptor?? [ 621.792228][ T5338] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 621.826657][ T5739] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 621.828226][ T5338] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 621.860509][ T5338] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 621.860557][ T5338] usb 4-1: media controller created [ 621.960584][ T5338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.976770][ T5739] usb 5-1: Using ep0 maxpacket: 16 [ 621.986206][ T9] usb 2-1: USB disconnect, device number 9 [ 621.994216][ T5739] usb 5-1: unable to get BOS descriptor or descriptor too short [ 621.994258][ T5739] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 622.025217][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.025243][ T5739] usb 5-1: Product: syz [ 622.025258][ T5739] usb 5-1: Manufacturer: syz [ 622.025273][ T5739] usb 5-1: SerialNumber: syz [ 622.154357][ T5338] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 622.154383][ T5338] error writing reg: 0xff, val: 0x00 [ 622.208722][T11771] fido_id[11771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 622.413730][ T5338] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 622.449232][ T5338] usb 4-1: USB disconnect, device number 22 [ 623.238948][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1729'. [ 624.194697][ T5739] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 624.668312][ T31] audit: type=1400 audit(1790538673.689:3360): avc: denied { mount } for pid=11793 comm="syz.3.1733" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 624.885425][ T31] audit: type=1400 audit(1790538673.899:3361): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 625.585270][ T5739] usb 5-1: USB disconnect, device number 18 [ 625.745927][ T31] audit: type=1400 audit(1790538674.759:3362): avc: denied { name_bind } for pid=11818 comm="syz.3.1741" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 626.168461][ T31] audit: type=1400 audit(1790538675.189:3363): avc: denied { write } for pid=11782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.318850][ T31] audit: type=1400 audit(1790538675.339:3364): avc: denied { read write } for pid=11827 comm="syz.3.1742" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 626.351676][ T31] audit: type=1400 audit(1790538675.339:3365): avc: denied { open } for pid=11827 comm="syz.3.1742" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 626.728476][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1745'. [ 629.897882][ T31] audit: type=1400 audit(1790538678.919:3366): avc: denied { write } for pid=11841 comm="syz.0.1748" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 629.999532][T11843] < [ 630.110285][ T31] audit: type=1400 audit(1790538679.129:3367): avc: denied { write } for pid=11845 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.536715][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 631.606352][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 632.150398][ T9] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 632.150451][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 632.150476][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 632.727645][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 632.727674][ T9] usb 4-1: Product: syz [ 632.727689][ T9] usb 4-1: Manufacturer: syz [ 632.727704][ T9] usb 4-1: SerialNumber: syz [ 632.764329][ T9] usb 4-1: config 0 descriptor?? [ 633.274905][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 633.274932][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 633.303531][ T9] usb 4-1: selecting invalid altsetting 0 [ 634.526585][ C0] sched: DL replenish lagged too much [ 670.685398][ T31] audit: type=1400 audit(1790538715.069:3368): avc: denied { recv } for pid=139 comm="kworker/u8:6" saddr=10.128.0.169 src=46952 daddr=10.128.0.175 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 680.447639][ T9] usb 4-1: USB disconnect, device number 23 [ 681.545605][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.562802][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.799282][T11883] xt_hashlimit: size too large, truncated to 1048576 [ 704.243262][T11884] udevd[11884]: setting mode of /dev/snd/pcmC3D0p to 020660 failed: No such file or directory [ 709.914475][T11884] udevd[11884]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: No such file or directory [ 711.745437][T11899] udevd[11899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.735287][ T5602] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 724.001295][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 726.349481][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 728.345737][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 729.976451][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 731.178973][T11902] Bluetooth: hci1: Opcode 0x1005 failed: -110 [ 732.279256][ T5602] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 732.990189][T11904] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.066884][T11904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.681173][T11904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 739.360009][T11906] Bluetooth: hci2: Opcode 0x0c23 failed: -110 [ 742.153660][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.163443][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.681499][T11904] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 758.588096][T11904] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 760.765573][T11904] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 761.359366][T11904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.964120][T11904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 762.098774][T11904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.140953][T11904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.199779][T11904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 762.532273][T11904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 762.729538][T11904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 762.731475][T11904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.920350][T11904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 763.099485][T11904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 763.134312][T11904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 763.213328][T11904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 765.135762][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 765.225278][T11904] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 765.269825][T11904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 766.266837][ T31] audit: type=1400 audit(1790538815.029:3369): avc: denied { mounton } for pid=11920 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 771.581671][ T5603] Bluetooth: hci1: command tx timeout [ 771.582682][ T5603] Bluetooth: hci0: command tx timeout [ 774.473232][ T5603] Bluetooth: hci1: command tx timeout [ 776.514369][T11927] Bluetooth: hci3: command tx timeout [ 776.515216][T11927] Bluetooth: hci1: command tx timeout [ 776.515244][T11927] Bluetooth: hci0: command tx timeout [ 778.621174][T11904] Bluetooth: hci0: command tx timeout [ 778.621214][T11904] Bluetooth: hci1: command tx timeout [ 778.621235][T11904] Bluetooth: hci3: command tx timeout [ 779.885271][T11904] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.563285][T11904] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.610601][T11904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.677244][T11904] Bluetooth: hci3: command tx timeout [ 780.677280][T11904] Bluetooth: hci0: command tx timeout [ 782.135572][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 782.313052][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 782.761839][ T5602] Bluetooth: hci3: command tx timeout [ 789.857070][T11930] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 804.079970][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.089810][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.815536][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 810.880132][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 811.120894][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 812.290537][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 812.838337][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.524139][T11925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 814.257925][T11927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 814.563764][T11925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.548800][T11927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 817.433771][T11927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 819.652625][T11927] Bluetooth: hci2: command tx timeout [ 821.949726][T11927] Bluetooth: hci2: command tx timeout [ 824.143724][T11925] Bluetooth: hci2: command tx timeout [ 824.502912][T11904] Bluetooth: hci5: command tx timeout [ 825.449191][T11927] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 826.445123][T11927] Bluetooth: hci2: command tx timeout [ 826.810102][T11927] Bluetooth: hci5: command tx timeout [ 828.830924][T11927] Bluetooth: hci5: command tx timeout [ 830.981664][T11927] Bluetooth: hci5: command tx timeout [ 834.781767][T11927] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 864.896719][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.906593][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.192558][T11925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 881.588777][T11925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 881.668492][T11925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.522237][T11925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 883.102430][T11925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.149778][T11925] Bluetooth: hci0: command tx timeout [ 889.801696][T11927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 889.945019][T11927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 890.126904][T11927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 890.187086][T11927] Bluetooth: hci0: command tx timeout [ 890.375236][T11927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 890.435636][T11927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 892.267992][T11927] Bluetooth: hci0: command tx timeout [ 892.495191][T11927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 892.896326][T11925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 892.961046][T11925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 893.159029][T11925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 893.220952][T11925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 894.346922][T11927] Bluetooth: hci0: command tx timeout [ 895.369782][T11904] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 896.588792][ T5602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 896.695254][ T5602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 897.346155][ T5602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 897.390140][ T5602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 897.643585][T11925] Bluetooth: hci3: command 0x0406 tx timeout [ 897.869264][ T5602] Bluetooth: hci4: command tx timeout [ 898.515540][T11925] Bluetooth: hci1: command tx timeout [ 900.068006][T11925] Bluetooth: hci6: command tx timeout [ 900.068966][T11925] Bluetooth: hci4: command tx timeout [ 900.627979][ T5602] Bluetooth: hci1: command tx timeout [ 902.721450][T11927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 902.723386][T11927] Bluetooth: hci4: command tx timeout [ 902.723419][T11927] Bluetooth: hci6: command tx timeout [ 902.723441][T11927] Bluetooth: hci1: command tx timeout [ 904.755289][T11927] Bluetooth: hci4: command tx timeout [ 905.016372][ T5602] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 905.049217][T11927] Bluetooth: hci7: command 0x1003 tx timeout [ 905.049992][T11927] Bluetooth: hci1: command tx timeout [ 905.050019][T11927] Bluetooth: hci6: command tx timeout [ 905.050136][T11927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 905.349967][T11925] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 906.521412][T11925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 906.565612][T11925] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 907.286943][T11925] Bluetooth: hci6: command tx timeout [ 909.093530][T11925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 910.825803][ T5602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 914.846825][T11925] Bluetooth: hci7: command tx timeout [ 917.069943][ T5602] Bluetooth: hci7: command tx timeout [ 919.156916][ T5602] Bluetooth: hci7: command tx timeout [ 920.311854][T11925] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 920.509072][T11925] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 920.588528][T11925] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 921.277965][T11925] Bluetooth: hci7: command tx timeout [ 921.570941][T11925] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 922.683100][T11925] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 926.243744][ T5602] Bluetooth: hci8: command tx timeout [ 926.290887][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.300900][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 928.323213][ T5602] Bluetooth: hci8: command tx timeout [ 931.663487][ T5602] Bluetooth: hci8: command tx timeout [ 933.769483][ T5602] Bluetooth: hci8: command tx timeout [ 944.279777][T11927] Bluetooth: hci2: command 0x0406 tx timeout [ 945.124844][T11927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 945.451939][T11927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 945.936243][T11927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 946.087089][T11927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 946.163187][T11927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 949.890144][T11927] Bluetooth: hci0: command tx timeout [ 951.610519][T11927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.698080][T11927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 952.208892][T11927] Bluetooth: hci0: command tx timeout [ 953.465545][T11925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 954.287667][T11925] Bluetooth: hci0: command tx timeout [ 954.307406][T11925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 954.541776][T11925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 956.499438][ T5602] Bluetooth: hci0: command tx timeout [ 958.561372][ T5602] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 958.712312][ T5602] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 958.761332][ T5602] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 958.832589][ T5602] Bluetooth: hci5: command tx timeout [ 960.141028][ T5602] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 960.622050][ T5602] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 961.084081][ T5602] Bluetooth: hci5: command tx timeout [ 961.837531][T11927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 961.930527][T11927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 962.253508][T11927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 963.157927][T11904] Bluetooth: hci5: command tx timeout [ 963.422309][T11927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 965.001186][T11927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.390659][T11925] Bluetooth: hci5: command tx timeout [ 968.042307][ T31] audit: type=1400 audit(1790539017.019:3370): avc: denied { write } for pid=11990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.078989][ T5602] Bluetooth: hci3: command tx timeout [ 969.090895][ T5602] Bluetooth: hci9: command tx timeout [ 971.197281][ T5602] Bluetooth: hci9: command tx timeout [ 971.197318][ T5602] Bluetooth: hci3: command tx timeout [ 972.228284][T11927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 972.339298][T11927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 972.749310][T11927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 973.238905][T11927] Bluetooth: hci3: command tx timeout [ 973.238939][T11927] Bluetooth: hci9: command tx timeout [ 973.252064][T11927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 973.317783][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 975.412221][T11927] Bluetooth: hci9: command tx timeout [ 975.412257][T11927] Bluetooth: hci3: command tx timeout [ 979.695609][T11925] Bluetooth: hci2: command tx timeout [ 981.863050][T11925] Bluetooth: hci2: command tx timeout [ 984.179919][T11925] Bluetooth: hci2: command tx timeout [ 986.795114][T11925] Bluetooth: hci2: command tx timeout [ 987.975569][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.990454][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.739276][ T31] audit: type=1400 audit(1790539039.729:3371): avc: denied { write } for pid=12044 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.130690][ T5944] bond0: (slave netdevsim1): Releasing backup interface [ 1011.584739][T11925] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1014.137851][T11925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1015.450515][T11925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1015.603113][T11925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1016.065945][T11925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1016.349835][T11925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1019.635524][T11925] Bluetooth: hci1: command tx timeout [ 1021.713181][T11925] Bluetooth: hci1: command tx timeout [ 1023.927640][T11925] Bluetooth: hci1: command tx timeout [ 1025.967807][T11925] Bluetooth: hci1: command tx timeout [ 1029.599873][T11927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1030.462280][T11927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1030.885336][T11904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1031.178685][T11904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1031.288953][T11904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1031.562866][T11904] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1031.892684][T11904] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1032.134137][T11904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1032.932945][ T5602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1034.746278][ T5602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1038.187975][T11927] Bluetooth: hci4: command tx timeout [ 1040.112664][T11904] Bluetooth: hci6: command tx timeout [ 1040.342528][T11927] Bluetooth: hci4: command tx timeout [ 1042.523655][T11904] Bluetooth: hci6: command tx timeout [ 1042.524657][T11904] Bluetooth: hci4: command tx timeout [ 1042.839870][T11927] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1044.684579][T11927] Bluetooth: hci4: command tx timeout [ 1044.684616][T11927] Bluetooth: hci6: command tx timeout [ 1046.767393][T11927] Bluetooth: hci6: command tx timeout [ 1046.982368][T11927] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1047.279266][T11927] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1047.789731][T11927] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1048.178204][T11927] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1048.251876][T11927] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1050.603060][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1050.616967][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.735506][ T1415] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.735922][ T1415] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.829864][T11927] Bluetooth: hci8: command tx timeout [ 1073.120363][ T5602] Bluetooth: hci8: command tx timeout [ 1075.293969][ T5602] Bluetooth: hci8: command tx timeout [ 1077.032023][T11934] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.067889][T11956] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.327514][T11927] Bluetooth: hci8: command tx timeout [ 1084.081388][ T5602] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1097.395439][ T31] audit: type=1400 audit(1790539146.409:3372): avc: denied { write } for pid=12075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.190014][ T5944] bridge_slave_1: left allmulticast mode [ 1100.463709][ T5944] bridge_slave_1: left promiscuous mode [ 1101.268322][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.894638][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.912316][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1112.050190][T11927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1113.697432][T11904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1113.805011][T11925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1113.897599][T11925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1113.921161][T11925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1115.365908][T11925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1115.573051][T11925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1116.115823][T11927] Bluetooth: hci1: Opcode 0x1001 failed: -110 [ 1116.342538][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1116.342569][ T5602] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1116.342648][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1117.324226][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1118.660618][T11925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1119.886096][T11904] Bluetooth: hci0: command tx timeout [ 1120.599146][T11927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1120.793973][ T31] audit: type=1400 audit(1790539169.789:3373): avc: denied { write } for pid=12126 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1121.226859][T11927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.593690][T11925] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1122.017923][T11927] Bluetooth: hci0: command tx timeout [ 1122.784471][T11927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1122.809068][T11927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1123.008615][T11927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1124.453891][T11927] Bluetooth: hci0: command tx timeout [ 1124.513331][T11927] Bluetooth: hci1: command tx timeout [ 1124.515867][T11925] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1125.582351][T11904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1125.657700][T11904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1126.316088][T11904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1126.532342][T11904] Bluetooth: hci0: command tx timeout [ 1126.906047][T11925] Bluetooth: hci1: command tx timeout [ 1126.929409][T11925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1127.136610][T11904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1128.403647][T11904] Bluetooth: hci2: command tx timeout [ 1130.092859][T11925] Bluetooth: hci1: command tx timeout [ 1130.407432][T11904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1130.446247][T11904] Bluetooth: hci2: command tx timeout [ 1130.569492][T11904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1132.110669][T11904] Bluetooth: hci1: command tx timeout [ 1132.770778][T11904] Bluetooth: hci2: command tx timeout [ 1134.939400][T11927] Bluetooth: hci2: command tx timeout [ 1135.175682][T11927] Bluetooth: hci3: command tx timeout [ 1137.664533][T11927] Bluetooth: hci3: command tx timeout [ 1139.716722][T11927] Bluetooth: hci3: command tx timeout [ 1141.807462][T11925] Bluetooth: hci3: command tx timeout [ 1171.030444][T11927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1171.212060][T11927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1171.591001][T11927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1171.703277][T11904] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1172.052142][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1172.062582][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.078403][T11904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1172.492815][T12164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1173.350711][T12164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1174.169800][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1174.245563][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1174.434677][T12164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1176.544130][T11925] Bluetooth: hci4: Opcode 0x0c16 failed: -110 [ 1176.787956][T11925] Bluetooth: hci5: command 0x0c1a tx timeout [ 1177.049905][T12162] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1177.235465][T11927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1178.626251][T12158] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1178.761292][T12164] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1180.852640][T11925] Bluetooth: hci6: Opcode 0x1001 failed: -110 [ 1181.622033][T11925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1181.622076][T11925] Bluetooth: hci6: unexpected event for opcode 0x1001 [ 1181.622158][T11925] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1182.068504][T11925] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1182.125564][T11925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1185.787877][T11925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1189.010153][T11925] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1191.080498][T12167] Bluetooth: hci6: Opcode 0x0c39 failed: -110 [ 1191.223036][T11925] Bluetooth: hci8: command 0x0406 tx timeout [ 1207.982838][T11927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1208.100414][T11927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1208.140816][T11927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1208.408626][T11927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1209.123713][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1210.739653][T11927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1210.929564][T11927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1211.074460][T11927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1211.786017][T11927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1212.135393][T11927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1219.984535][T11925] Bluetooth: hci4: command tx timeout [ 1222.199329][T12164] Bluetooth: hci4: command tx timeout [ 1222.200118][T12164] Bluetooth: hci5: command tx timeout [ 1224.322743][T11927] Bluetooth: hci5: command tx timeout [ 1224.322780][T11927] Bluetooth: hci4: command tx timeout [ 1226.731675][T11927] Bluetooth: hci5: command tx timeout [ 1226.731712][T11927] Bluetooth: hci4: command tx timeout [ 1228.879793][T11925] Bluetooth: hci5: command tx timeout [ 1233.953931][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.971657][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.367385][T11927] Bluetooth: hci0: command 0x0406 tx timeout [ 1243.631699][ T32] INFO: task kworker/u8:2:11934 blocked for more than 143 seconds. [ 1243.631725][ T32] Tainted: G L syzkaller #0 [ 1243.631734][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1243.631741][ T32] task:kworker/u8:2 state:D stack:26776 pid:11934 tgid:11934 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1243.631806][ T32] Workqueue: events_unbound linkwatch_event [ 1243.631831][ T32] Call Trace: [ 1243.631836][ T32] [ 1243.631848][ T32] __schedule+0x1259/0x6920 [ 1243.631873][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1243.631896][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1243.631919][ T32] ? kthread_data+0x53/0xc0 [ 1243.631939][ T32] ? __pfx___schedule+0x10/0x10 [ 1243.631959][ T32] ? find_held_lock+0x2b/0x80 [ 1243.631980][ T32] ? schedule+0x225/0x2c0 [ 1243.632005][ T32] schedule+0xdd/0x2c0 [ 1243.632026][ T32] schedule_preempt_disabled+0x13/0x30 [ 1243.632048][ T32] __mutex_lock+0xccb/0x1bd0 [ 1243.632064][ T32] ? linkwatch_event+0x51/0xc0 [ 1243.632084][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1243.632115][ T32] ? linkwatch_event+0x51/0xc0 [ 1243.632131][ T32] ? rtnl_lock+0x9/0x20 [ 1243.632146][ T32] linkwatch_event+0x51/0xc0 [ 1243.632162][ T32] ? __pfx_linkwatch_event+0x10/0x10 [ 1243.632180][ T32] ? rcu_is_watching+0x13/0xc0 [ 1243.632203][ T32] process_one_work+0xac7/0x1b10 [ 1243.632248][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1243.632272][ T32] ? lock_acquire+0x1d1/0x380 [ 1243.632296][ T32] ? __pfx_linkwatch_event+0x10/0x10 [ 1243.632315][ T32] worker_thread+0x5ef/0xe50 [ 1243.632336][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1243.632360][ T32] ? kthread+0x13a/0x450 [ 1243.632380][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1243.632403][ T32] kthread+0x373/0x450 [ 1243.632424][ T32] ? __pfx_kthread+0x10/0x10 [ 1243.632447][ T32] ret_from_fork+0x730/0xd60 [ 1243.632468][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.632487][ T32] ? __switch_to+0x800/0x10f0 [ 1243.632512][ T32] ? __pfx_kthread+0x10/0x10 [ 1243.632536][ T32] ret_from_fork_asm+0x1a/0x30 [ 1243.632564][ T32] [ 1243.632573][ T32] INFO: task syz-executor:12077 blocked for more than 143 seconds. [ 1243.632585][ T32] Tainted: G L syzkaller #0 [ 1243.632593][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1243.632599][ T32] task:syz-executor state:D stack:27384 pid:12077 tgid:12077 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1243.632644][ T32] Call Trace: [ 1243.632649][ T32] [ 1243.632656][ T32] __schedule+0x1259/0x6920 [ 1243.632679][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1243.632700][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1243.632723][ T32] ? lock_acquire+0x1d1/0x380 [ 1243.632742][ T32] ? __pfx___schedule+0x10/0x10 [ 1243.632763][ T32] ? find_held_lock+0x2b/0x80 [ 1243.632787][ T32] ? schedule+0x225/0x2c0 [ 1243.632812][ T32] schedule+0xdd/0x2c0 [ 1243.632834][ T32] schedule_preempt_disabled+0x13/0x30 [ 1243.632857][ T32] __mutex_lock+0xccb/0x1bd0 [ 1243.632874][ T32] ? rtnl_newlink+0xac3/0x2620 [ 1243.632900][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1243.632915][ T32] ? rcu_is_watching+0x13/0xc0 [ 1243.632937][ T32] ? cap_capable+0x107/0x430 [ 1243.632961][ T32] ? ns_capable+0xd2/0xf0 [ 1243.632978][ T32] ? netlink_ns_capable+0xfa/0x130 [ 1243.633000][ T32] ? rtnl_newlink+0xac3/0x2620 [ 1243.633021][ T32] rtnl_newlink+0xac3/0x2620 [ 1243.633047][ T32] ? is_bpf_text_address+0x41/0x1a0 [ 1243.633076][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1243.633099][ T32] ? avc_has_perm_noaudit+0x56/0x470 [ 1243.633123][ T32] ? find_held_lock+0x2b/0x80 [ 1243.633144][ T32] ? avc_has_perm_noaudit+0x11e/0x470 [ 1243.633166][ T32] ? avc_has_perm_noaudit+0x11e/0x470 [ 1243.633202][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1243.633231][ T32] ? lock_acquire+0x1d1/0x380 [ 1243.633259][ T32] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1243.633285][ T32] ? find_held_lock+0x2b/0x80 [ 1243.633309][ T32] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1243.633334][ T32] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1243.633360][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1243.633387][ T32] rtnetlink_rcv_msg+0x95e/0xe90 [ 1243.633416][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1243.633448][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1243.633471][ T32] ? __netlink_lookup+0xa9/0x900 [ 1243.633496][ T32] netlink_rcv_skb+0x159/0x420 [ 1243.633521][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1243.633549][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1243.633581][ T32] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1243.633614][ T32] netlink_unicast+0x585/0x850 [ 1243.633642][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 1243.633667][ T32] ? __pfx_sock_has_perm+0x10/0x10 [ 1243.633694][ T32] netlink_sendmsg+0x8b0/0xda0 [ 1243.633724][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1243.633751][ T32] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1243.633780][ T32] __sys_sendto+0x48b/0x4e0 [ 1243.633804][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1243.633830][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1243.633877][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 1243.633912][ T32] __x64_sys_sendto+0xe0/0x1c0 [ 1243.633936][ T32] ? do_syscall_64+0xae/0x790 [ 1243.633956][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 1243.633976][ T32] do_syscall_64+0x123/0x790 [ 1243.633999][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.634021][ T32] RIP: 0033:0x7fc5c5d5e98e [ 1243.634038][ T32] RSP: 002b:00007ffd4aa6b568 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1243.634058][ T32] RAX: ffffffffffffffda RBX: 0000555556178500 RCX: 00007fc5c5d5e98e [ 1243.634072][ T32] RDX: 000000000000002c RSI: 00007fc5c6b54670 RDI: 0000000000000003 [ 1243.634084][ T32] RBP: 0000000000000001 R08: 00007ffd4aa6b5e4 R09: 000000000000000c [ 1243.634096][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1243.634108][ T32] R13: 0000000000000000 R14: 00007fc5c6b54670 R15: 0000000000000000 [ 1243.634137][ T32] [ 1243.634166][ T32] [ 1243.634166][ T32] Showing all locks held in the system: [ 1243.634178][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 1243.634193][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.634256][ T32] #1: ffffc900000e7d08 ((debug_obj_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.634311][ T32] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1243.634366][ T32] locks held by kworker/u8:1/13: 2, on CPU#1: [ 1243.634380][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.634435][ T32] #1: ffffc90000127d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.634493][ T32] locks held by kworker/1:0/25: 1, last CPU#1: [ 1243.634507][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 [ 1243.634561][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1243.634574][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1243.634630][ T32] locks held by kworker/u8:4/61: 2, last CPU#1: [ 1243.634644][ T32] #0: ffff888034c04140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.634698][ T32] #1: ffffc9000203fd08 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.634755][ T32] locks held by kworker/u8:6/139: 3, on CPU#0: [ 1243.634769][ T32] #0: ffff888034572140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.634823][ T32] #1: ffffc90002e57d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.634879][ T32] #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1243.634934][ T32] locks held by kworker/u8:9/1415: 2, on CPU#1: [ 1243.634948][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.635002][ T32] #1: ffffc90005e4fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.635057][ T32] locks held by kworker/u8:11/1493: 3, last CPU#1: [ 1243.635071][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.635125][ T32] #1: ffffc9000611fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.635181][ T32] #2: ffff888057167258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1243.635247][ T32] locks held by kworker/u8:13/1541: 2, last CPU#1: [ 1243.635261][ T32] #0: ffff88801c093940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.635315][ T32] #1: ffffc90005fcfd08 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.635384][ T32] locks held by dhcpcd/5266: 2, on CPU#0: [ 1243.635398][ T32] #0: ffff888056cac6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 1243.635447][ T32] #1: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa53/0x14b0 [ 1243.635493][ T32] locks held by getty/5358: 2, on CPU#0: [ 1243.635506][ T32] #0: ffff88803870b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1243.635554][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1243.635600][ T32] locks held by syz-executor/5589: 1, last CPU#1: [ 1243.635614][ T32] #0: ffff888029ea1c60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0x11d/0x630 [ 1243.635667][ T32] locks held by kworker/0:6/5720: 4, last CPU#0: [ 1243.635680][ T32] #0: ffff88805849fd40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.635739][ T32] #1: ffffc90002f47d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.635811][ T32] #2: ffff888028c5d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 1243.635869][ T32] #3: ffff888028dabea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 1243.635925][ T32] locks held by kworker/1:6/5784: 3, on CPU#1: [ 1243.635939][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.635991][ T32] #1: ffffc9000208fd08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.636045][ T32] #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1243.636102][ T32] locks held by kworker/u8:19/5944: 6, last CPU#1: [ 1243.636117][ T32] #0: ffff88801d2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.636170][ T32] #1: ffffc9000515fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.636224][ T32] #2: ffffffff90cbbf48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1243.636275][ T32] #3: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1243.647814][ T32] #4: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1243.647868][ T32] #5: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1243.647926][ T32] locks held by kworker/1:3/11898: 2, last CPU#1: [ 1243.647941][ T32] #0: ffff8880358e7140 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.648001][ T32] #1: ffffc90004ae7d08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.648057][ T32] locks held by kworker/u9:1/11925: 6, last CPU#0: [ 1243.648071][ T32] #0: ffff888029dc3940 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.648130][ T32] #1: ffffc9000395fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.648184][ T32] #2: ffff88808fda4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 1243.648232][ T32] #3: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x437/0x1600 [ 1243.648286][ T32] #4: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: nf_hook.constprop.0+0x98/0x750 [ 1243.648336][ T32] #5: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __ip_local_out+0x472/0xb80 [ 1243.648389][ T32] locks held by kworker/u8:2/11934: 3, on CPU#1: [ 1243.648403][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.648459][ T32] #1: ffffc900034f7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.648512][ T32] #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1243.648558][ T32] locks held by kworker/1:5/11962: 3, last CPU#1: [ 1243.648572][ T32] #0: ffff88805849fd40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.648630][ T32] #1: ffffc900032f7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.648701][ T32] #2: ffff888028c5d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 1243.648757][ T32] locks held by syz-executor/12077: 1, on CPU#1: [ 1243.648772][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 1243.648824][ T32] locks held by syz-executor/12122: 1, on CPU#1: [ 1243.648838][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 1243.648890][ T32] locks held by syz-executor/12123: 1, on CPU#1: [ 1243.648904][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 1243.648955][ T32] locks held by syz-executor/12128: 1, on CPU#0: [ 1243.648969][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 1243.649020][ T32] locks held by syz-executor/12130: 1, on CPU#1: [ 1243.649032][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 1243.649083][ T32] locks held by kworker/1:2/12150: 2, last CPU#1: [ 1243.649097][ T32] #0: ffff888058480140 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.649161][ T32] #1: ffffc90004d77d08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.649217][ T32] locks held by kworker/1:4/12169: 3, last CPU#1: [ 1243.649231][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1243.649287][ T32] #1: ffffc900033a7d08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1243.649339][ T32] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x21a/0x1a10 [ 1243.649382][ T32] locks held by syz-executor/12180: 1, last CPU#1: [ 1243.649396][ T32] #0: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1243.649445][ T32] locks held by syz-executor/12182: 3, last CPU#1: [ 1243.649458][ T32] #0: ffff888038320460 (sb_writers#5){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1243.649512][ T32] #1: ffff8880754f7040 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 1243.649568][ T32] #2: ffff888038354938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 1243.649618][ T32] locks held by modprobe/12183: 3, last CPU#1: [ 1243.649632][ T32] #0: ffff888038169308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 1243.649685][ T32] #1: ffff888056501bc0 (&mm->mmap_lock){++++}-{4:4}, at: __vmf_anon_prepare+0xf2/0x250 [ 1243.649735][ T32] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 1243.649787][ T32] [ 1243.649792][ T32] ============================================= [ 1243.649792][ T32] [ 1243.649817][ T32] NMI backtrace for cpu 1 [ 1243.649838][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.649864][ T32] Tainted: [L]=SOFTLOCKUP [ 1243.649871][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1243.649883][ T32] Call Trace: [ 1243.649889][ T32] [ 1243.649898][ T32] dump_stack_lvl+0x100/0x190 [ 1243.649929][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1243.649959][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1243.649982][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1243.650011][ T32] sys_info+0x141/0x190 [ 1243.650034][ T32] watchdog+0xcb1/0x1030 [ 1243.650063][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1243.650092][ T32] ? __pfx_watchdog+0x10/0x10 [ 1243.650115][ T32] ? __kthread_parkme+0x18f/0x230 [ 1243.650142][ T32] ? kthread+0x13a/0x450 [ 1243.650166][ T32] ? __pfx_watchdog+0x10/0x10 [ 1243.650187][ T32] kthread+0x373/0x450 [ 1243.650211][ T32] ? __pfx_kthread+0x10/0x10 [ 1243.650244][ T32] ret_from_fork+0x730/0xd60 [ 1243.650267][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.650290][ T32] ? __switch_to+0x800/0x10f0 [ 1243.650316][ T32] ? __pfx_kthread+0x10/0x10 [ 1243.650343][ T32] ret_from_fork_asm+0x1a/0x30 [ 1243.650377][ T32] [ 1243.650385][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1243.650418][ C0] NMI backtrace for cpu 0 [ 1243.650432][ C0] CPU: 0 UID: 0 PID: 11925 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.650457][ C0] Tainted: [L]=SOFTLOCKUP [ 1243.650464][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1243.650476][ C0] Workqueue: hci1 hci_cmd_sync_work [ 1243.650497][ C0] RIP: 0010:unwind_next_frame+0xdf9/0x2090 [ 1243.650524][ C0] Code: 0f 95 c6 40 84 f7 0f 85 fe 0c 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 e7 0c 00 00 0f b6 41 04 c0 e8 04 <3c> 04 0f 84 8c 07 00 00 3c 08 0f 84 ce 06 00 00 84 c0 0f 84 8d 01 [ 1243.650540][ C0] RSP: 0018:ffffc90000007978 EFLAGS: 00000a02 [ 1243.650555][ C0] RAX: 0000000000000008 RBX: 0000000000000001 RCX: ffffffff91e9a28a [ 1243.650567][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1243.650577][ C0] RBP: ffffc90000007a30 R08: ffffffff91e9a28e R09: 0000000000000007 [ 1243.650589][ C0] R10: 0000000000000200 R11: 000000000000d0e8 R12: ffffc90000007a38 [ 1243.650600][ C0] R13: ffffc900000079e8 R14: ffffc9000395fdb0 R15: ffffc90000007a1c [ 1243.650613][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 1243.650630][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1243.650643][ C0] CR2: 00007f7d80aeb4e8 CR3: 00000000378ac000 CR4: 00000000003526f0 [ 1243.650654][ C0] Call Trace: [ 1243.650660][ C0] [ 1243.650666][ C0] ? process_one_work+0xac7/0x1b10 [ 1243.650696][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1243.650716][ C0] arch_stack_walk+0x94/0xf0 [ 1243.650746][ C0] ? worker_thread+0x5ef/0xe50 [ 1243.650763][ C0] ? dst_destroy+0x2c7/0x3f0 [ 1243.650786][ C0] stack_trace_save+0x8e/0xc0 [ 1243.650804][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1243.650824][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1243.650846][ C0] kasan_save_stack+0x30/0x50 [ 1243.650868][ C0] ? kasan_save_stack+0x30/0x50 [ 1243.650889][ C0] ? kasan_save_track+0x14/0x30 [ 1243.650910][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1243.650946][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1243.650968][ C0] ? kmem_cache_free+0x127/0x6c0 [ 1243.650986][ C0] ? dst_destroy+0x2c7/0x3f0 [ 1243.651007][ C0] ? rcu_core+0x5f0/0x1260 [ 1243.651030][ C0] ? handle_softirqs+0x1e6/0x9d0 [ 1243.651049][ C0] ? do_softirq+0xaf/0xf0 [ 1243.651067][ C0] ? __local_bh_enable_ip+0xff/0x120 [ 1243.651086][ C0] ? __alloc_skb+0x5db/0x710 [ 1243.651107][ C0] ? hci_cmd_sync_alloc+0x39/0x3d0 [ 1243.651127][ C0] ? __hci_cmd_sync_sk+0x151/0xcf0 [ 1243.651147][ C0] ? __hci_cmd_sync_status_sk+0x48/0x190 [ 1243.651168][ C0] ? hci_disconnect_sync+0x143/0x1e0 [ 1243.651192][ C0] ? hci_abort_conn_sync+0x37a/0xb20 [ 1243.651212][ C0] ? abort_conn_sync+0x142/0x350 [ 1243.651235][ C0] ? hci_cmd_sync_work+0x1c0/0x470 [ 1243.651254][ C0] ? process_one_work+0xac7/0x1b10 [ 1243.651296][ C0] kasan_save_track+0x14/0x30 [ 1243.651317][ C0] kasan_save_free_info+0x3b/0x70 [ 1243.651335][ C0] __kasan_slab_free+0x5f/0x80 [ 1243.651358][ C0] kmem_cache_free+0x127/0x6c0 [ 1243.651375][ C0] ? ipv4_dst_destroy+0x1d0/0x270 [ 1243.651393][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 1243.651414][ C0] dst_destroy+0x2c7/0x3f0 [ 1243.651437][ C0] ? rcu_core+0x5eb/0x1260 [ 1243.651459][ C0] rcu_core+0x5f0/0x1260 [ 1243.651484][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1243.651510][ C0] ? run_timer_base+0x121/0x190 [ 1243.651530][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1243.651553][ C0] handle_softirqs+0x1e6/0x9d0 [ 1243.651574][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1243.651593][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1243.651611][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1243.651630][ C0] ? __alloc_skb+0x5b7/0x710 [ 1243.651653][ C0] do_softirq+0xaf/0xf0 [ 1243.651671][ C0] [ 1243.651677][ C0] [ 1243.651683][ C0] __local_bh_enable_ip+0xff/0x120 [ 1243.651702][ C0] __alloc_skb+0x5db/0x710 [ 1243.651724][ C0] ? __alloc_skb+0x5b7/0x710 [ 1243.651750][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1243.651774][ C0] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1243.651800][ C0] hci_cmd_sync_alloc+0x39/0x3d0 [ 1243.651822][ C0] __hci_cmd_sync_sk+0x151/0xcf0 [ 1243.651844][ C0] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 1243.651864][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1243.651891][ C0] ? try_to_wake_up+0x158/0x1c90 [ 1243.651919][ C0] ? find_held_lock+0x2b/0x80 [ 1243.651947][ C0] __hci_cmd_sync_status_sk+0x48/0x190 [ 1243.651970][ C0] hci_disconnect_sync+0x143/0x1e0 [ 1243.651996][ C0] ? __pfx_hci_disconnect_sync+0x10/0x10 [ 1243.652022][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1243.652044][ C0] hci_abort_conn_sync+0x37a/0xb20 [ 1243.652066][ C0] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1243.652086][ C0] ? lock_acquire+0x1d1/0x380 [ 1243.652105][ C0] ? abort_conn_sync+0x35/0x350 [ 1243.652129][ C0] ? find_held_lock+0x2b/0x80 [ 1243.652155][ C0] ? abort_conn_sync+0xf8/0x350 [ 1243.652177][ C0] ? abort_conn_sync+0xf8/0x350 [ 1243.652203][ C0] abort_conn_sync+0x142/0x350 [ 1243.652228][ C0] hci_cmd_sync_work+0x1c0/0x470 [ 1243.652251][ C0] process_one_work+0xac7/0x1b10 [ 1243.652284][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1243.652311][ C0] ? lock_acquire+0x1d1/0x380 [ 1243.652335][ C0] ? __pfx_hci_cmd_sync_work+0x10/0x10 [ 1243.652357][ C0] worker_thread+0x5ef/0xe50 [ 1243.652377][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1243.652404][ C0] ? kthread+0x13a/0x450 [ 1243.652427][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1243.652453][ C0] kthread+0x373/0x450 [ 1243.652477][ C0] ? __pfx_kthread+0x10/0x10 [ 1243.652502][ C0] ret_from_fork+0x730/0xd60 [ 1243.652523][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.652542][ C0] ? rcu_is_watching+0x13/0xc0 [ 1243.652567][ C0] ? __switch_to+0x800/0x10f0 [ 1243.652591][ C0] ? __pfx_kthread+0x10/0x10 [ 1243.652617][ C0] ret_from_fork_asm+0x1a/0x30 [ 1243.652643][ C0] [ 1243.653426][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1245.903937][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.914616][ T32] Tainted: [L]=SOFTLOCKUP [ 1245.918933][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1245.928983][ T32] Call Trace: [ 1245.932262][ T32] [ 1245.935189][ T32] dump_stack_lvl+0x100/0x190 [ 1245.939878][ T32] vpanic+0x553/0x970 [ 1245.943858][ T32] ? __pfx_vpanic+0x10/0x10 [ 1245.948367][ T32] panic+0xd1/0xe0 [ 1245.952090][ T32] ? __pfx_panic+0x10/0x10 [ 1245.956508][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 1245.961549][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1245.967707][ T32] ? watchdog.cold+0x1ec/0x234 [ 1245.972474][ T32] watchdog.cold+0x1fd/0x234 [ 1245.977109][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1245.982922][ T32] ? __pfx_watchdog+0x10/0x10 [ 1245.987606][ T32] ? __kthread_parkme+0x18f/0x230 [ 1245.992639][ T32] ? kthread+0x13a/0x450 [ 1245.996891][ T32] ? __pfx_watchdog+0x10/0x10 [ 1246.001566][ T32] kthread+0x373/0x450 [ 1246.005636][ T32] ? __pfx_kthread+0x10/0x10 [ 1246.010235][ T32] ret_from_fork+0x730/0xd60 [ 1246.014829][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.019943][ T32] ? __switch_to+0x800/0x10f0 [ 1246.024630][ T32] ? __pfx_kthread+0x10/0x10 [ 1246.029229][ T32] ret_from_fork_asm+0x1a/0x30 [ 1246.034016][ T32] [ 1246.037252][ T32] Kernel Offset: disabled [ 1246.041571][ T32] Rebooting in 86400 seconds..