last executing test programs: 34.47802534s ago: executing program 0 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1, 0x0, 0x6}, 0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 34.294013085s ago: executing program 0 (id=604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x59, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00001da000/0x3000)=nil, 0x3000, 0x0) 33.925221584s ago: executing program 0 (id=608): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x4000000, 0x0, 0x2, r2}]) 33.561841217s ago: executing program 0 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 33.405890499s ago: executing program 0 (id=611): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 33.277731401s ago: executing program 0 (id=613): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="71a62334a92dd5e5e52910287bafef628c"], 0x11) 20.461639519s ago: executing program 2 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040) 19.257122062s ago: executing program 4 (id=774): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) read(r2, &(0x7f0000000040)=""/252, 0xfc) 19.104550034s ago: executing program 4 (id=776): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 19.029380428s ago: executing program 2 (id=778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000980)=ANY=[@ANYRESDEC], 0xfe8e) r1 = open(&(0x7f0000000000)='./file0\x00', 0x22740, 0x9b) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 18.968815513s ago: executing program 2 (id=779): mlockall(0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 18.913558129s ago: executing program 4 (id=780): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 18.852527036s ago: executing program 4 (id=781): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7e20009058f", @ANYRES8], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18.688435332s ago: executing program 3 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000006000000020000000000000000000000fbffff"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x6, 0x1000}) 18.60586325s ago: executing program 2 (id=784): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x190, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x453}, {0x0, 0x2}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2d, 0x1, 0x3, 0x5}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18.395390928s ago: executing program 3 (id=785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x8001}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) 18.34880386s ago: executing program 2 (id=786): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) 17.976413457s ago: executing program 32 (id=613): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="71a62334a92dd5e5e52910287bafef628c"], 0x11) 17.972254319s ago: executing program 3 (id=789): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 17.970197237s ago: executing program 1 (id=790): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='X\x00', 0x2}], 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 17.870744943s ago: executing program 3 (id=791): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x8, 0x0) 17.800145105s ago: executing program 3 (id=792): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 17.235168526s ago: executing program 3 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 17.037455033s ago: executing program 1 (id=794): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) 16.616213491s ago: executing program 4 (id=795): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 16.167111916s ago: executing program 1 (id=796): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) 16.166854033s ago: executing program 4 (id=797): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) 16.12719838s ago: executing program 1 (id=798): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\n\x00\x00\x00\b'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 16.057954647s ago: executing program 1 (id=799): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f00000000c0)={r1}) 16.054876047s ago: executing program 1 (id=800): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x1, 0x9, 0x80000001}}, 0x28) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 15.251616519s ago: executing program 2 (id=801): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000000080)=""/153, 0x1a, 0x99, 0x4}, 0x28) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc}) 1.996608812s ago: executing program 33 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.003197515s ago: executing program 34 (id=800): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x1, 0x9, 0x80000001}}, 0x28) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 977.790185ms ago: executing program 35 (id=797): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) 0s ago: executing program 36 (id=801): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000000080)=""/153, 0x1a, 0x99, 0x4}, 0x28) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc}) kernel console output (not intermixed with test programs): ry [ 73.987703][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.019951][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.060724][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.090071][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.189901][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.203968][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.215605][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.228989][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.293943][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.307922][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.318754][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.327886][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.404010][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.418250][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.428326][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.453963][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.514105][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.541105][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.550925][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.561321][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.571952][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.610177][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.639688][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.669764][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.677026][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.695927][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.720017][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.728808][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.735910][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.754937][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.762067][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.812781][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.819890][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.848500][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.860051][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.867189][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.882410][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.900614][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.907726][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.966361][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.985091][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.992219][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.017057][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.024179][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.057965][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.069209][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.089436][ T30] audit: type=1400 audit(1763445390.044:86): avc: denied { sys_module } for pid=5809 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.146362][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.208319][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.215490][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.240232][ T5825] Bluetooth: hci0: command tx timeout [ 75.249484][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.256647][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.294102][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.315472][ T5825] Bluetooth: hci1: command tx timeout [ 75.391982][ T5825] Bluetooth: hci2: command tx timeout [ 75.419790][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.538093][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.551855][ T5825] Bluetooth: hci3: command tx timeout [ 75.555303][ T5812] Bluetooth: hci4: command tx timeout [ 75.579866][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.595358][ T5809] veth0_vlan: entered promiscuous mode [ 75.637469][ T5809] veth1_vlan: entered promiscuous mode [ 75.736281][ T5815] veth0_vlan: entered promiscuous mode [ 75.744008][ T5809] veth0_macvtap: entered promiscuous mode [ 75.755256][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.774458][ T5809] veth1_macvtap: entered promiscuous mode [ 75.801102][ T5815] veth1_vlan: entered promiscuous mode [ 75.817217][ T5821] veth0_vlan: entered promiscuous mode [ 75.857112][ T5821] veth1_vlan: entered promiscuous mode [ 75.869731][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.901498][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.913509][ T5815] veth0_macvtap: entered promiscuous mode [ 75.943517][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.957226][ T5815] veth1_macvtap: entered promiscuous mode [ 75.982490][ T3496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.991384][ T3496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.006372][ T5821] veth0_macvtap: entered promiscuous mode [ 76.018425][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.027936][ T3496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.039664][ T3496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.064869][ T5821] veth1_macvtap: entered promiscuous mode [ 76.076641][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.127181][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.136218][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.160832][ T1147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.169905][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.197046][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.227870][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.260714][ T3553] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.278398][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.282900][ T3553] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.287473][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.296860][ T3553] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.326968][ T5817] veth0_vlan: entered promiscuous mode [ 76.333088][ T3553] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.390439][ T5817] veth1_vlan: entered promiscuous mode [ 76.414884][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.429040][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.442718][ T5819] veth0_vlan: entered promiscuous mode [ 76.466822][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.482960][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.507029][ T5819] veth1_vlan: entered promiscuous mode [ 76.517487][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.532727][ T30] audit: type=1400 audit(1763445391.474:87): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.1E4xIS/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.534831][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.565617][ T30] audit: type=1400 audit(1763445391.474:88): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.582121][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.604790][ T30] audit: type=1400 audit(1763445391.474:89): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.1E4xIS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.621329][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.633225][ T30] audit: type=1400 audit(1763445391.474:90): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.676512][ T30] audit: type=1400 audit(1763445391.514:91): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.1E4xIS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.678864][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.722677][ T30] audit: type=1400 audit(1763445391.514:92): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.1E4xIS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.758554][ T5817] veth0_macvtap: entered promiscuous mode [ 76.759040][ T30] audit: type=1400 audit(1763445391.524:93): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.799549][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.799789][ T5819] veth0_macvtap: entered promiscuous mode [ 76.813420][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.824067][ T30] audit: type=1400 audit(1763445391.564:94): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.836669][ T5817] veth1_macvtap: entered promiscuous mode [ 76.886406][ T5819] veth1_macvtap: entered promiscuous mode [ 76.923908][ T30] audit: type=1400 audit(1763445391.564:95): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="gadgetfs" ino=7889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.953588][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.985666][ T30] audit: type=1400 audit(1763445391.564:96): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.027029][ T30] audit: type=1400 audit(1763445391.564:97): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 77.039144][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.060357][ T30] audit: type=1400 audit(1763445391.564:98): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 77.094258][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.161116][ T1110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.174111][ T1110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.190425][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.210314][ T5931] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 77.224287][ T1110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.236914][ T1110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.264799][ T5934] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 77.287944][ T5931] team0: Port device dummy0 added [ 77.298334][ T5934] team0: Port device dummy0 removed [ 77.310029][ T5934] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.322780][ T1110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.323108][ T5812] Bluetooth: hci0: command tx timeout [ 77.332722][ T3553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377067][ T3553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.392373][ T5812] Bluetooth: hci1: command tx timeout [ 77.425734][ T3553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.472336][ T5812] Bluetooth: hci2: command tx timeout [ 77.549015][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.603183][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.635927][ T5812] Bluetooth: hci4: command tx timeout [ 77.642027][ T5812] Bluetooth: hci3: command tx timeout [ 77.656232][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.670905][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.759364][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.786763][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.844190][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.866417][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.114771][ T5950] Bluetooth: MGMT ver 1.23 [ 78.227508][ T5956] IPv6: sit1: Disabled Multicast RS [ 78.230652][ T5958] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 78.260133][ T5956] sit1: entered allmulticast mode [ 78.477216][ T5967] Illegal XDP return value 65535 on prog (id 4) dev syz_tun, expect packet loss! [ 78.514964][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 79.090617][ T5995] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 79.279756][ T6002] wg1 speed is unknown, defaulting to 1000 [ 79.285942][ T6002] wg1 speed is unknown, defaulting to 1000 [ 79.303760][ T6002] wg1 speed is unknown, defaulting to 1000 [ 79.324127][ T6002] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.361556][ T6002] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 79.403014][ T5812] Bluetooth: hci0: command tx timeout [ 79.471873][ T5812] Bluetooth: hci1: command tx timeout [ 79.509562][ T6002] wg1 speed is unknown, defaulting to 1000 [ 79.552584][ T5812] Bluetooth: hci2: command tx timeout [ 79.603495][ T6002] wg1 speed is unknown, defaulting to 1000 [ 79.644298][ T6002] wg1 speed is unknown, defaulting to 1000 [ 79.691004][ T6002] wg1 speed is unknown, defaulting to 1000 [ 79.721933][ T5825] Bluetooth: hci4: command tx timeout [ 79.727765][ T5812] Bluetooth: hci3: command tx timeout [ 79.764252][ T6002] wg1 speed is unknown, defaulting to 1000 [ 79.996450][ T6021] bond1: invalid ARP target 0.0.0.0 specified for addition [ 80.067831][ T6021] bond1: option arp_ip_target: invalid value (0) [ 80.124399][ T6021] bond1 (unregistering): Released all slaves [ 80.533264][ T6036] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.507419][ T1858] cfg80211: failed to load regulatory.db [ 81.558942][ T6064] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.55'. [ 82.069691][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 82.069707][ T30] audit: type=1400 audit(1763445397.024:176): avc: denied { read } for pid=6071 comm="syz.1.59" path="socket:[8708]" dev="sockfs" ino=8708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.150675][ T30] audit: type=1400 audit(1763445397.104:177): avc: denied { create } for pid=6074 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.172972][ T30] audit: type=1400 audit(1763445397.104:178): avc: denied { listen } for pid=6074 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.193471][ T6076] netlink: 240 bytes leftover after parsing attributes in process `syz.1.59'. [ 82.205031][ T30] audit: type=1400 audit(1763445397.104:179): avc: denied { accept } for pid=6074 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.922180][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.922593][ T6043] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 83.685188][ T6043] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.694416][ T6043] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.701908][ T6043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.707885][ T6043] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.719293][ T6043] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.726153][ T6043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.732688][ T6043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.740368][ T6043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.748169][ T6043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.754408][ T6043] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.761976][ T6043] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.769833][ T6043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.776341][ T6043] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.783265][ T6043] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.798418][ T30] audit: type=1400 audit(1763445398.744:180): avc: denied { ioctl } for pid=6082 comm="syz.4.63" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.081964][ T5810] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.090017][ T1858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.111451][ T6096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.68'. [ 84.276124][ T1858] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.299234][ T1858] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.309463][ T1858] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.322584][ T1858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.340290][ T6083] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.349451][ T30] audit: type=1400 audit(1763445399.304:181): avc: denied { create } for pid=6105 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.353646][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.374456][ T1858] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.392487][ T30] audit: type=1400 audit(1763445399.344:182): avc: denied { connect } for pid=6105 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.411865][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.451895][ T5810] usb 4-1: device not accepting address 2, error -71 [ 84.563431][ T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 84.580076][ T1858] usb 5-1: USB disconnect, device number 2 [ 84.591702][ T30] audit: type=1400 audit(1763445399.534:183): avc: denied { write } for pid=6110 comm="syz.1.72" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.614405][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.628876][ T9] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 84.671168][ T9] usb 1-1: config 0 has no interface number 0 [ 84.698261][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 84.713301][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.738800][ T9] usb 1-1: Product: syz [ 84.744266][ T9] usb 1-1: Manufacturer: syz [ 84.748908][ T9] usb 1-1: SerialNumber: syz [ 84.779626][ T9] usb 1-1: config 0 descriptor?? [ 84.821923][ T5810] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.891402][ T6120] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.002625][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.010335][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.024204][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.035533][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 85.050949][ T5810] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 85.060862][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 85.069262][ T5810] usb 4-1: Product: syz [ 85.080649][ T5810] usb 4-1: config 0 descriptor?? [ 85.250341][ T9] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 85.257951][ T9] uvcvideo 1-1:0.64: No valid video chain found. [ 85.268844][ T9] usb 1-1: USB disconnect, device number 2 [ 85.468429][ T30] audit: type=1400 audit(1763445400.424:184): avc: denied { nlmsg_write } for pid=6131 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.514880][ T5810] waltop 0003:172F:0037.0001: unknown main item tag 0x0 [ 85.527089][ T5810] waltop 0003:172F:0037.0001: unknown main item tag 0x0 [ 85.544327][ T5810] waltop 0003:172F:0037.0001: unknown main item tag 0x0 [ 85.566317][ T5810] waltop 0003:172F:0037.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 85.659855][ T30] audit: type=1400 audit(1763445400.614:185): avc: denied { execute } for pid=6136 comm="syz.4.82" path="/15/cpuacct.usage_percpu" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.683324][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.721904][ T5812] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.766824][ T9] usb 4-1: USB disconnect, device number 3 [ 85.791997][ T5812] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.792543][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.798157][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.827507][ T6137] fido_id[6137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 85.846899][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 85.870535][ T6142] Zero length message leads to an empty skb [ 86.138717][ T6156] loop2: detected capacity change from 0 to 7 [ 86.150518][ T6156] Dev loop2: unable to read RDB block 7 [ 86.159443][ T6156] loop2: AHDI p1 p2 p3 [ 86.163810][ T6156] loop2: partition table partially beyond EOD, truncated [ 86.191029][ T6156] loop2: p1 start 1601398130 is beyond EOD, truncated [ 86.208388][ T6156] loop2: p2 start 1702059890 is beyond EOD, truncated [ 86.289186][ T6160] netlink: 408 bytes leftover after parsing attributes in process `syz.0.91'. [ 86.487637][ T6172] tipc: Started in network mode [ 86.500664][ T6172] tipc: Node identity ac14140f, cluster identity 4711 [ 86.517901][ T6172] tipc: New replicast peer: 255.255.255.255 [ 86.537098][ T6172] tipc: Enabled bearer , priority 10 [ 86.648474][ T6174] wg1 speed is unknown, defaulting to 1000 [ 86.960798][ T6193] capability: warning: `syz.3.104' uses 32-bit capabilities (legacy support in use) [ 87.071801][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.090147][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 87.090162][ T30] audit: type=1400 audit(1763445402.044:200): avc: denied { setopt } for pid=6173 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.366832][ T30] audit: type=1400 audit(1763445402.324:201): avc: denied { read } for pid=6197 comm="syz.4.106" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.383188][ T6200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.467202][ T30] audit: type=1400 audit(1763445402.324:202): avc: denied { open } for pid=6197 comm="syz.4.106" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.504559][ T30] audit: type=1400 audit(1763445402.334:203): avc: denied { create } for pid=6198 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.530015][ T30] audit: type=1400 audit(1763445402.364:204): avc: denied { read append } for pid=6197 comm="syz.4.106" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.585648][ T30] audit: type=1400 audit(1763445402.364:205): avc: denied { open } for pid=6197 comm="syz.4.106" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.613831][ T6202] netlink: 96 bytes leftover after parsing attributes in process `syz.2.108'. [ 87.652530][ T9] tipc: Node number set to 2886997007 [ 87.688139][ T30] audit: type=1400 audit(1763445402.364:206): avc: denied { map } for pid=6197 comm="syz.4.106" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.734771][ T30] audit: type=1400 audit(1763445402.364:207): avc: denied { write execute } for pid=6197 comm="syz.4.106" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.799958][ T6207] capability: warning: `syz.0.111' uses deprecated v2 capabilities in a way that may be insecure [ 87.801925][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.822745][ T30] audit: type=1400 audit(1763445402.384:208): avc: denied { ioctl } for pid=6195 comm="syz.3.105" path="socket:[9861]" dev="sockfs" ino=9861 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.847515][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.854609][ T30] audit: type=1400 audit(1763445402.724:209): avc: denied { read write } for pid=6206 comm="syz.0.111" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.877708][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.893932][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.897235][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.900021][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.993967][ T6213] warning: `syz.1.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.222908][ T6220] : entered promiscuous mode [ 88.304338][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 88.372276][ T6224] cgroup: Unexpected value for 'cpuset_v2_mode' [ 88.998298][ T6252] tls_set_device_offload_rx: netdev not found [ 89.006354][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.130'. [ 89.021713][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.034389][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 89.062509][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 89.172149][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 89.242340][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.252762][ T6262] syz_tun: entered allmulticast mode [ 89.262330][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 89.269914][ T5868] usb 3-1: can't read configurations, error -71 [ 89.278435][ T6261] syz_tun: left allmulticast mode [ 89.348827][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.358695][ T6267] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 89.469676][ T6271] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 89.871840][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.951738][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.952032][ T5812] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.957857][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.109416][ T6292] process 'syz.2.150' launched './file0' with NULL argv: empty string added [ 90.353021][ T6297] wg1 speed is unknown, defaulting to 1000 [ 91.673293][ T6332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.709079][ T6332] netlink: 'syz.1.168': attribute type 25 has an invalid length. [ 91.734841][ T6332] netlink: 'syz.1.168': attribute type 7 has an invalid length. [ 91.748110][ T6332] netlink: 'syz.1.168': attribute type 1 has an invalid length. [ 91.764234][ T6332] netlink: 156 bytes leftover after parsing attributes in process `syz.1.168'. [ 91.778654][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.137817][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 92.711681][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 92.711697][ T30] audit: type=1400 audit(1763445407.664:244): avc: denied { ioctl } for pid=6359 comm="syz.0.180" path="socket:[10505]" dev="sockfs" ino=10505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.988707][ T30] audit: type=1400 audit(1763445407.664:245): avc: denied { bind } for pid=6359 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.039436][ T30] audit: type=1400 audit(1763445407.664:246): avc: denied { connect } for pid=6359 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.059276][ T30] audit: type=1400 audit(1763445407.744:247): avc: denied { read } for pid=6362 comm="syz.2.182" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.081843][ T30] audit: type=1400 audit(1763445407.744:248): avc: denied { open } for pid=6362 comm="syz.2.182" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.129119][ T6370] netlink: 52 bytes leftover after parsing attributes in process `syz.4.184'. [ 93.243863][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 93.849293][ T30] audit: type=1400 audit(1763445408.804:249): avc: denied { watch } for pid=6389 comm="syz.3.193" path="/39/file0" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.877949][ T6388] veth0_vlan: entered allmulticast mode [ 93.941498][ T6393] ªªªªª»: renamed from veth0_vlan [ 93.949330][ T30] audit: type=1400 audit(1763445408.844:250): avc: denied { watch_sb watch_reads } for pid=6389 comm="syz.3.193" path="/39/file0" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.368069][ T30] audit: type=1400 audit(1763445409.324:251): avc: denied { read } for pid=6404 comm="syz.4.198" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.392675][ T30] audit: type=1400 audit(1763445409.324:252): avc: denied { open } for pid=6404 comm="syz.4.198" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.418251][ T30] audit: type=1400 audit(1763445409.354:253): avc: denied { ioctl } for pid=6406 comm="syz.0.199" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.503376][ T6411] fuse: Bad value for 'fd' [ 95.495220][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 95.516995][ T68] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.525939][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 95.534934][ T68] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.563229][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.591596][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.351803][ T6398] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 96.363174][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.109554][ T6398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.117091][ T6398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.124022][ T6398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.130040][ T6398] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 97.379528][ T975] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 97.426490][ T975] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.438958][ T6444] Invalid ELF header magic: != ELF [ 97.559356][ T6449] Bluetooth: MGMT ver 1.23 [ 97.665734][ T6454] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96 [ 97.758263][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 97.758280][ T30] audit: type=1326 audit(1763445412.714:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.0.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f8318f6c9 code=0x0 [ 97.932617][ T30] audit: type=1400 audit(1763445412.884:261): avc: denied { write } for pid=6438 comm="syz.3.211" name="hidraw0" dev="devtmpfs" ino=2824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.069634][ T6470] veth0_vlan: entered allmulticast mode [ 98.144853][ T6473] ªªªªª»: renamed from veth0_vlan [ 98.374571][ T30] audit: type=1400 audit(1763445413.334:262): avc: denied { create } for pid=6481 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.414520][ T30] audit: type=1400 audit(1763445413.354:263): avc: denied { connect } for pid=6481 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.434677][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.468652][ T30] audit: type=1400 audit(1763445413.354:264): avc: denied { setopt } for pid=6481 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.494909][ T30] audit: type=1400 audit(1763445413.354:265): avc: denied { bind } for pid=6481 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.518304][ T30] audit: type=1400 audit(1763445413.354:266): avc: denied { write } for pid=6481 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.888503][ T30] audit: type=1400 audit(1763445413.844:267): avc: denied { bind } for pid=6505 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.161800][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 99.162873][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.174133][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.060743][ T30] audit: type=1400 audit(1763445415.014:268): avc: denied { listen } for pid=6527 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.080765][ T30] audit: type=1400 audit(1763445415.014:269): avc: denied { accept } for pid=6527 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.672652][ T6485] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.682874][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.421706][ T6485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.427790][ T6485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.433934][ T6485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.439887][ T6485] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.446822][ T6485] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.893632][ T5868] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.084725][ T5868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.105472][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.117759][ T5868] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.244027][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.272469][ T5868] usb 1-1: SerialNumber: syz [ 102.530377][ T5868] usb 1-1: 0:2 : does not exist [ 102.572778][ T5868] usb 1-1: unit 236 not found! [ 102.641749][ T5868] usb 1-1: USB disconnect, device number 3 [ 102.707548][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 102.741440][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.752818][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.920729][ T6617] kvm: MWAIT instruction emulated as NOP! [ 103.034287][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 103.060968][ T6629] bridge_slave_1: left allmulticast mode [ 103.071082][ T6629] bridge_slave_1: left promiscuous mode [ 103.087352][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.104594][ T6629] bridge_slave_0: left allmulticast mode [ 103.113575][ T6629] bridge_slave_0: left promiscuous mode [ 103.121082][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.218665][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 103.218680][ T30] audit: type=1400 audit(1763445418.174:292): avc: denied { write } for pid=6633 comm="syz.1.267" name="mcfilter" dev="proc" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.248082][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.267727][ T30] audit: type=1400 audit(1763445418.224:293): avc: denied { create } for pid=6636 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.287166][ T30] audit: type=1400 audit(1763445418.244:294): avc: denied { bind } for pid=6636 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.349598][ T30] audit: type=1400 audit(1763445418.304:295): avc: denied { write } for pid=6636 comm="syz.0.268" path="socket:[11748]" dev="sockfs" ino=11748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.471979][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.478019][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.484411][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.608159][ T30] audit: type=1400 audit(1763445418.564:296): avc: denied { lock } for pid=6640 comm="syz.1.269" path="socket:[11760]" dev="sockfs" ino=11760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 103.631830][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.052203][ T30] audit: type=1400 audit(1763445419.014:297): avc: denied { write } for pid=6655 comm="syz.4.276" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.223296][ T30] audit: type=1400 audit(1763445419.034:298): avc: denied { ioctl } for pid=6655 comm="syz.4.276" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.247638][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.280823][ T6661] netlink: 'syz.4.277': attribute type 29 has an invalid length. [ 104.293438][ T6661] netlink: 'syz.4.277': attribute type 29 has an invalid length. [ 104.307528][ T6661] netlink: 500 bytes leftover after parsing attributes in process `syz.4.277'. [ 104.807632][ T6683] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.286'. [ 104.958672][ T30] audit: type=1400 audit(1763445419.914:299): avc: denied { name_connect } for pid=6689 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 104.978670][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.062559][ T30] audit: type=1400 audit(1763445419.964:300): avc: denied { shutdown } for pid=6688 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.178525][ T30] audit: type=1400 audit(1763445420.134:301): avc: denied { ioctl } for pid=6696 comm="syz.1.293" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.257775][ T6695] SELinux: failed to load policy [ 105.505242][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 105.554936][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.681069][ T6714] wg1 speed is unknown, defaulting to 1000 [ 105.732749][ T6719] netlink: 'syz.1.302': attribute type 9 has an invalid length. [ 105.745258][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 105.824587][ T6720] netlink: 'syz.1.302': attribute type 9 has an invalid length. [ 105.848142][ T6719] hsr0: entered promiscuous mode [ 105.865426][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 105.890502][ T6719] macvlan2: entered promiscuous mode [ 105.907969][ T6719] macvlan2: entered allmulticast mode [ 105.931785][ T6719] hsr0: entered allmulticast mode [ 105.939073][ T6719] hsr_slave_0: entered allmulticast mode [ 105.982614][ T6719] hsr_slave_1: entered allmulticast mode [ 106.039435][ T6720] macvlan3: entered promiscuous mode [ 106.061579][ T6720] macvlan3: entered allmulticast mode [ 107.413635][ T5810] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.593605][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 107.645048][ T5810] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 107.661682][ T5810] usb 1-1: config 0 has no interface number 0 [ 107.673759][ T5810] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 107.691543][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.708823][ T5810] usb 1-1: Product: syz [ 107.720384][ T5810] usb 1-1: Manufacturer: syz [ 107.737097][ T5810] usb 1-1: SerialNumber: syz [ 107.772563][ T5810] usb 1-1: config 0 descriptor?? [ 107.784968][ T5810] smsc95xx v2.0.0 [ 108.252113][ T5868] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.422055][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 108.438601][ T5868] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 108.457930][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.476616][ T5868] usb 5-1: Product: syz [ 108.491838][ T5868] usb 5-1: Manufacturer: syz [ 108.497819][ T5868] usb 5-1: SerialNumber: syz [ 108.509715][ T5868] r8152-cfgselector 5-1: Unknown version 0x0000 [ 108.518692][ T5868] r8152-cfgselector 5-1: config 0 descriptor?? [ 109.002196][ T5810] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 109.035375][ T5810] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 109.052498][ T5810] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 109.065504][ T975] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 109.078142][ T5810] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 109.097105][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 109.137745][ T5810] usb 1-1: USB disconnect, device number 4 [ 109.275430][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 109.295084][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.321681][ T24] usb 3-1: Product: syz [ 109.326048][ T24] usb 3-1: Manufacturer: syz [ 109.330642][ T24] usb 3-1: SerialNumber: syz [ 109.345297][ T24] usb 3-1: config 0 descriptor?? [ 109.384962][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 109.384978][ T30] audit: type=1400 audit(1763445937.348:321): avc: denied { setopt } for pid=6819 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.412564][ T30] audit: type=1400 audit(1763445937.368:322): avc: denied { connect } for pid=6819 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.438341][ T30] audit: type=1400 audit(1763445937.398:323): avc: denied { create } for pid=6821 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.461441][ T30] audit: type=1400 audit(1763445937.408:324): avc: denied { connect } for pid=6821 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.485319][ T30] audit: type=1400 audit(1763445937.408:325): avc: denied { setopt } for pid=6821 comm="syz.3.342" laddr=172.20.20.10 lport=36078 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.510284][ T30] audit: type=1400 audit(1763445937.408:326): avc: denied { write } for pid=6821 comm="syz.3.342" path="socket:[12150]" dev="sockfs" ino=12150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.649950][ T30] audit: type=1400 audit(1763445937.608:327): avc: denied { create } for pid=6828 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.703498][ T6831] input: syz0 as /devices/virtual/input/input5 [ 109.723478][ T6831] input: failed to attach handler leds to device input5, error: -6 [ 109.723661][ T30] audit: type=1400 audit(1763445937.638:328): avc: denied { ioctl } for pid=6830 comm="syz.3.345" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.758715][ T24] airspy 3-1:0.0: Board ID: 00 [ 109.768549][ T24] airspy 3-1:0.0: Firmware version: [ 109.840966][ T6834] input: syz0 as /devices/virtual/input/input6 [ 109.851715][ T30] audit: type=1400 audit(1763445937.648:329): avc: denied { read } for pid=6828 comm="syz.0.344" path="socket:[12429]" dev="sockfs" ino=12429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.934909][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 109.935882][ T30] audit: type=1400 audit(1763445937.708:330): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2835 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.572588][ T24] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 110.592458][ T5810] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.601605][ T24] airspy 3-1:0.0: Registered as swradio24 [ 110.607402][ T24] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 110.623974][ T24] usb 3-1: USB disconnect, device number 4 [ 110.773756][ T5810] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.792532][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.805732][ T5810] usb 2-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 110.824416][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.883005][ T5810] usb 2-1: config 0 descriptor?? [ 111.034412][ T6869] syzkaller1: entered promiscuous mode [ 111.040278][ T6869] syzkaller1: entered allmulticast mode [ 111.050703][ T6869] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 111.331013][ T5810] hid (null): bogus close delimiter [ 111.356083][ T5810] hid (null): unknown global tag 0xc [ 111.364461][ T6877] wg1 speed is unknown, defaulting to 1000 [ 111.404746][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.424418][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.450993][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.470583][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.491736][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.524803][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.551973][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.572232][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.593773][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.600581][ T5810] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 111.645227][ T5810] asus 0003:0B05:1A30.0003: bogus close delimiter [ 111.651761][ T5810] asus 0003:0B05:1A30.0003: item 0 0 2 10 parsing failed [ 111.662644][ T5810] asus 0003:0B05:1A30.0003: Asus hid parse failed: -22 [ 111.681754][ T5810] asus 0003:0B05:1A30.0003: probe with driver asus failed with error -22 [ 111.700725][ T5810] usb 2-1: USB disconnect, device number 3 [ 112.502619][ T6903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.655002][ T6909] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.829053][ T6913] wg1 speed is unknown, defaulting to 1000 [ 112.852573][ T6911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.066401][ T6921] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 113.481868][ T5868] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.695036][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.715474][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.742182][ T5868] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.751572][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.777823][ T5868] usb 4-1: SerialNumber: syz [ 113.811902][ T5921] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 113.980118][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 114.006648][ T5868] usb 4-1: 0:2 : does not exist [ 114.018253][ T5921] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 114.026434][ T5868] usb 4-1: unit 236 not found! [ 114.029481][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.042289][ T6950] loop6: detected capacity change from 0 to 7 [ 114.050063][ T6950] Dev loop6: unable to read RDB block 7 [ 114.055783][ T6950] loop6: unable to read partition table [ 114.056546][ T5868] usb 4-1: USB disconnect, device number 4 [ 114.061567][ T6950] loop6: partition table beyond EOD, truncated [ 114.080438][ T6950] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 114.098310][ T5921] usb 1-1: config 0 descriptor?? [ 114.100957][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.120065][ T6937] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 114.324002][ T6958] block nbd2: NBD_DISCONNECT [ 114.330338][ T6958] block nbd2: Disconnected due to user request. [ 114.351011][ T6958] block nbd2: shutting down sockets [ 114.467601][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 114.467616][ T30] audit: type=1400 audit(1763445942.428:346): avc: denied { read } for pid=6963 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.597785][ T5921] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 114.636122][ T975] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 114.751803][ T5868] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.804031][ T975] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 114.821951][ T975] usb 2-1: config 0 has no interface number 0 [ 114.828198][ T975] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 114.849565][ T6937] elan 0003:04F3:0755.0004: pid 6937 passed too short report [ 114.849600][ T975] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.849627][ T975] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 114.888421][ T5921] usb 1-1: USB disconnect, device number 5 [ 114.900604][ T975] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 114.919563][ T975] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 114.929327][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.940408][ T975] usb 2-1: Product: syz [ 114.945113][ T975] usb 2-1: Manufacturer: syz [ 114.949862][ T975] usb 2-1: SerialNumber: syz [ 114.957404][ T975] usb 2-1: config 0 descriptor?? [ 114.962467][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 114.970143][ T5868] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 114.983892][ T975] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.996414][ T5868] usb 3-1: config 0 has no interface number 0 [ 115.006657][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 115.016153][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.025721][ T975] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input7 [ 115.036379][ T5868] usb 3-1: Product: syz [ 115.041032][ T5868] usb 3-1: Manufacturer: syz [ 115.052671][ T5868] usb 3-1: SerialNumber: syz [ 115.065112][ T5868] usb 3-1: config 0 descriptor?? [ 115.076647][ T5868] hub 3-1:0.132: bad descriptor, ignoring hub [ 115.083435][ T5868] hub 3-1:0.132: probe with driver hub failed with error -5 [ 115.096673][ T5868] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input8 [ 115.307700][ T5868] usb 2-1: USB disconnect, device number 4 [ 115.322856][ T30] audit: type=1400 audit(1763445943.278:347): avc: denied { read write } for pid=6965 comm="syz.2.400" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 115.348009][ T30] audit: type=1400 audit(1763445943.278:348): avc: denied { open } for pid=6965 comm="syz.2.400" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 115.525786][ T30] audit: type=1400 audit(1763445943.488:349): avc: denied { mount } for pid=6987 comm="syz.3.410" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.594140][ T975] usb 3-1: USB disconnect, device number 5 [ 115.601402][ T30] audit: type=1400 audit(1763445943.508:350): avc: denied { search } for pid=6987 comm="syz.3.410" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.637056][ T30] audit: type=1400 audit(1763445943.508:351): avc: denied { search } for pid=6987 comm="syz.3.410" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.660481][ T30] audit: type=1400 audit(1763445943.508:352): avc: denied { read open } for pid=6987 comm="syz.3.410" path="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.291392][ T7012] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.420'. [ 116.310981][ T7012] openvswitch: netlink: Missing key (keys=40, expected=80) [ 116.418314][ T7014] wg1 speed is unknown, defaulting to 1000 [ 116.558216][ T30] audit: type=1400 audit(1763445944.498:353): avc: denied { mount } for pid=7018 comm="syz.1.423" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 116.772115][ T30] audit: type=1400 audit(1763445944.728:354): avc: denied { create } for pid=7026 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.838664][ T30] audit: type=1400 audit(1763445944.778:355): avc: denied { listen } for pid=7026 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.149552][ T7037] SELinux: failed to load policy [ 117.518366][ T7047] netlink: 'syz.3.436': attribute type 12 has an invalid length. [ 118.000749][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 118.302743][ T7074] block nbd1: NBD_DISCONNECT [ 118.307861][ T7074] block nbd1: Disconnected due to user request. [ 118.321750][ T7074] block nbd1: shutting down sockets [ 118.559122][ T7084] wg1 speed is unknown, defaulting to 1000 [ 118.778829][ T7091] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 119.007695][ T7091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.121496][ T7095] bond1: (slave geneve2): making interface the new active one [ 119.176863][ T7095] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.785939][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 120.062323][ T975] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.161978][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.201481][ T7140] syz.1.475: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.217015][ T7140] CPU: 1 UID: 0 PID: 7140 Comm: syz.1.475 Not tainted syzkaller #0 PREEMPT(full) [ 120.217041][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.217056][ T7140] Call Trace: [ 120.217063][ T7140] [ 120.217072][ T7140] dump_stack_lvl+0x16c/0x1f0 [ 120.217100][ T7140] warn_alloc+0x248/0x3a0 [ 120.217144][ T7140] ? __pfx_warn_alloc+0x10/0x10 [ 120.217174][ T7140] ? __pfx_stack_trace_save+0x10/0x10 [ 120.217210][ T7140] ? kasan_save_stack+0x42/0x60 [ 120.217230][ T7140] ? kasan_save_stack+0x33/0x60 [ 120.217248][ T7140] ? kasan_save_track+0x14/0x30 [ 120.217268][ T7140] ? xskq_create+0x52/0x1d0 [ 120.217293][ T7140] ? xsk_setsockopt+0x74e/0x9a0 [ 120.217316][ T7140] ? do_sock_setsockopt+0xf3/0x1d0 [ 120.217349][ T7140] ? xskq_create+0xfb/0x1d0 [ 120.217377][ T7140] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 120.217413][ T7140] ? xskq_create+0xfb/0x1d0 [ 120.217447][ T7140] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.217483][ T7140] ? xskq_create+0xfb/0x1d0 [ 120.217511][ T7140] vmalloc_user_noprof+0x9e/0xe0 [ 120.217536][ T7140] ? xskq_create+0xfb/0x1d0 [ 120.217564][ T7140] xskq_create+0xfb/0x1d0 [ 120.217595][ T7140] xsk_setsockopt+0x74e/0x9a0 [ 120.217623][ T7140] ? __pfx_xsk_setsockopt+0x10/0x10 [ 120.217648][ T7140] ? find_held_lock+0x2b/0x80 [ 120.217679][ T7140] ? selinux_socket_setsockopt+0x6a/0x80 [ 120.217701][ T7140] ? __pfx_xsk_setsockopt+0x10/0x10 [ 120.217730][ T7140] do_sock_setsockopt+0xf3/0x1d0 [ 120.217766][ T7140] __sys_setsockopt+0x1a0/0x230 [ 120.217799][ T7140] __x64_sys_setsockopt+0xbd/0x160 [ 120.217824][ T7140] ? do_syscall_64+0x91/0xfa0 [ 120.217844][ T7140] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.217864][ T7140] do_syscall_64+0xcd/0xfa0 [ 120.217886][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.217905][ T7140] RIP: 0033:0x7f0ee558f6c9 [ 120.217921][ T7140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.217940][ T7140] RSP: 002b:00007f0ee63da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.217961][ T7140] RAX: ffffffffffffffda RBX: 00007f0ee57e6090 RCX: 00007f0ee558f6c9 [ 120.217974][ T7140] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 120.217987][ T7140] RBP: 00007f0ee5611f91 R08: 0000000000000004 R09: 0000000000000000 [ 120.217999][ T7140] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.218011][ T7140] R13: 00007f0ee57e6128 R14: 00007f0ee57e6090 R15: 00007ffeb112d398 [ 120.218042][ T7140] [ 120.218058][ T7140] Mem-Info: [ 120.233205][ T975] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 120.240692][ T7140] active_anon:15483 inactive_anon:0 isolated_anon:0 [ 120.240692][ T7140] active_file:17284 inactive_file:44721 isolated_file:0 [ 120.240692][ T7140] unevictable:768 dirty:4730 writeback:0 [ 120.240692][ T7140] slab_reclaimable:12137 slab_unreclaimable:97467 [ 120.240692][ T7140] mapped:29425 shmem:12132 pagetables:1087 [ 120.240692][ T7140] sec_pagetables:0 bounce:0 [ 120.240692][ T7140] kernel_misc_reclaimable:0 [ 120.240692][ T7140] free:1292223 free_pcp:19557 free_cma:0 [ 120.254127][ T975] usb 1-1: config 1 has no interface number 0 [ 120.258915][ T7140] Node 0 active_anon:61932kB inactive_anon:0kB active_file:69136kB inactive_file:178680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117700kB dirty:18920kB writeback:0kB shmem:46992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11816kB pagetables:4184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.284151][ T975] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 120.288613][ T7140] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.329504][ T975] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 120.335248][ T7140] Node 0 [ 120.345643][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.348881][ T7140] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.358032][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.359651][ T7140] lowmem_reserve[]: [ 120.371665][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.374653][ T7140] 0 [ 120.379352][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.384375][ T7140] 2485 2487 2487 2487 [ 120.384403][ T7140] Node 0 DMA32 free:1269352kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62032kB inactive_anon:0kB active_file:69136kB inactive_file:178680kB unevictable:1536kB writepending:18920kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:58328kB local_pcp:35936kB free_cma:0kB [ 120.384451][ T7140] lowmem_reserve[]: 0 0 1 1 1 [ 120.384479][ T7140] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.384524][ T7140] lowmem_reserve[]: 0 0 0 0 0 [ 120.384554][ T7140] Node 1 Normal free:3884180kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:12960kB free_cma:0kB [ 120.384601][ T7140] lowmem_reserve[]: 0 0 0 0 0 [ 120.384630][ T7140] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.385078][ T7140] Node 0 DMA32: 2405*4kB (UM) 849*8kB (UME) 406*16kB (UM) 597*32kB (UME) 193*64kB (UM) 82*128kB (UM) 59*256kB (UM) 23*512kB (UME) 12*1024kB (UME) 7*2048kB (ME) 281*4096kB (M) = 1269340kB [ 120.385239][ T7140] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 120.385348][ T7140] Node 1 Normal: 185*4kB (U) 44*8kB (UME) 41*16kB [ 120.390248][ T975] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 120.396343][ T7140] (UME) [ 120.406058][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.420278][ T7140] 78*32kB [ 120.431247][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.497985][ T7140] (UME) [ 120.530157][ T975] usb 1-1: Product: syz [ 120.750788][ T7140] 24*64kB [ 120.785527][ T10] usb 4-1: config 0 descriptor?? [ 120.919124][ T7140] (UME) 8*128kB (UME) 4*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3884180kB [ 120.930266][ T7140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.944405][ T975] usb 1-1: Manufacturer: syz [ 120.949014][ T975] usb 1-1: SerialNumber: syz [ 120.953716][ T7140] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.974874][ T7123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.977206][ T7140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.991697][ T7140] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.001011][ T7140] 75187 total pagecache pages [ 121.005979][ T7140] 0 pages in swap cache [ 121.010713][ T7123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.011525][ T7140] Free swap = 124996kB [ 121.030717][ T975] usb 1-1: Expected 3 endpoints, found: 2 [ 121.062882][ T7140] Total swap = 124996kB [ 121.067130][ T7140] 2097051 pages RAM [ 121.070944][ T7140] 0 pages HighMem/MovableOnly [ 121.077433][ T7140] 428747 pages reserved [ 121.081606][ T7140] 0 pages cma reserved [ 121.145985][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 121.146001][ T30] audit: type=1400 audit(1763445949.108:358): avc: denied { read } for pid=7150 comm="syz.4.481" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.178080][ T7151] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 121.179570][ T30] audit: type=1400 audit(1763445949.108:359): avc: denied { open } for pid=7150 comm="syz.4.481" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.222499][ T30] audit: type=1400 audit(1763445949.138:360): avc: denied { ioctl } for pid=7150 comm="syz.4.481" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.326686][ T975] IPVS: starting estimator thread 0... [ 121.399477][ T24] usb 1-1: USB disconnect, device number 6 [ 121.442544][ T7161] IPVS: using max 32 ests per chain, 76800 per kthread [ 121.526238][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 121.681851][ T5921] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.855294][ T24] usb 4-1: USB disconnect, device number 5 [ 121.865565][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 121.897671][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.924124][ T5921] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 121.941903][ T5921] usb 3-1: config 0 has no interface number 0 [ 121.958333][ T5921] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 122.001247][ T5921] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 122.051955][ T5921] usb 3-1: config 0 interface 41 has no altsetting 0 [ 122.077824][ T5921] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 122.087366][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.096071][ T5921] usb 3-1: Product: syz [ 122.100313][ T5921] usb 3-1: Manufacturer: syz [ 122.105764][ T5921] usb 3-1: SerialNumber: syz [ 122.115614][ T5921] usb 3-1: config 0 descriptor?? [ 122.121366][ T7167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.130606][ T7167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.212405][ T30] audit: type=1400 audit(1763445950.178:361): avc: denied { search } for pid=7186 comm="syz.1.496" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.238464][ T30] audit: type=1400 audit(1763445950.198:362): avc: denied { search } for pid=7186 comm="syz.1.496" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.281912][ T30] audit: type=1400 audit(1763445950.198:363): avc: denied { read open } for pid=7186 comm="syz.1.496" path="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.366255][ T7167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.382179][ T30] audit: type=1326 audit(1763445950.348:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.4.497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63f678f6c9 code=0x0 [ 122.425381][ T7167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.450339][ T30] audit: type=1400 audit(1763445950.348:365): avc: denied { accept } for pid=7191 comm="syz.1.498" lport=44130 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.508323][ T30] audit: type=1400 audit(1763445950.348:366): avc: denied { setopt } for pid=7191 comm="syz.1.498" lport=44130 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 122.656368][ T7202] tipc: Enabled bearer , priority 0 [ 122.760978][ T30] audit: type=1400 audit(1763445950.718:367): avc: denied { unlink } for pid=7206 comm="syz.0.505" name="#1" dev="tmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.843409][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'. [ 122.864920][ T5921] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 122.912143][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.921064][ T10] IPVS: starting estimator thread 0... [ 123.014631][ T7213] IPVS: using max 33 ests per chain, 79200 per kthread [ 123.071002][ T7217] SELinux: failed to load policy [ 123.473226][ T5921] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 123.495106][ T7235] netlink: 'syz.0.518': attribute type 9 has an invalid length. [ 123.505491][ T5921] dm9601 3-1:0.41 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 0a:1a:00:17:ae:c9 [ 123.518581][ T7235] netlink: 'syz.0.518': attribute type 11 has an invalid length. [ 123.526656][ T7235] netlink: 'syz.0.518': attribute type 12 has an invalid length. [ 123.537008][ T5921] usb 3-1: USB disconnect, device number 6 [ 123.542967][ T7235] netlink: 210060 bytes leftover after parsing attributes in process `syz.0.518'. [ 123.554310][ T5921] dm9601 3-1:0.41 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 123.565299][ T7235] openvswitch: netlink: Message has 4 unknown bytes. [ 123.955652][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.674736][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.786212][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 124.992283][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.277282][ T7314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.510181][ T7322] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 125.651462][ T7322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.742068][ T7324] bond1: (slave geneve2): making interface the new active one [ 125.752976][ T7324] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 125.761898][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.772431][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.809109][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.846108][ T3553] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.900350][ T7331] netlink: 96 bytes leftover after parsing attributes in process `syz.4.555'. [ 126.032082][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.268407][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 126.268424][ T30] audit: type=1400 audit(1763445954.228:384): avc: denied { remount } for pid=7349 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 126.309045][ T30] audit: type=1400 audit(1763445954.268:385): avc: denied { ioctl } for pid=7350 comm="syz.2.564" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 126.803876][ T7363] "syz.0.566" (7363) uses obsolete ecb(arc4) skcipher [ 126.971528][ T7375] use of bytesused == 0 is deprecated and will be removed in the future, [ 126.989048][ T7378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.998002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.998469][ T7375] use the actual size instead. [ 127.078163][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.209534][ T30] audit: type=1400 audit(1763445955.168:386): avc: denied { mount } for pid=7391 comm="syz.4.579" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.260568][ T30] audit: type=1400 audit(1763445955.218:387): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.537705][ T7414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.553937][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.713751][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.112403][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.149939][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 128.311787][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 128.477524][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 128.489272][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 128.491966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.501355][ T24] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 128.514543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 128.519942][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.533828][ T24] usb 5-1: Product: syz [ 128.538049][ T24] usb 5-1: Manufacturer: syz [ 128.542854][ T5921] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 128.551322][ T24] usb 5-1: SerialNumber: syz [ 128.571391][ T24] usb 5-1: config 0 descriptor?? [ 128.578914][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 128.590273][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 128.614621][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.625694][ T30] audit: type=1400 audit(1763445956.588:388): avc: denied { mount } for pid=7454 comm="syz.0.608" name="/" dev="ramfs" ino=15857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 128.706088][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 128.731452][ T5921] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 128.756381][ T24] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 128.767721][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.817682][ T5921] usb 3-1: config 0 descriptor?? [ 128.826076][ T7453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 128.836053][ T24] usb 5-1: USB disconnect, device number 4 [ 129.154358][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.186862][ T7471] input: syz0 as /devices/virtual/input/input9 [ 129.264919][ T5921] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 129.711129][ T9] usb 3-1: USB disconnect, device number 7 [ 130.200775][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.402563][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.442753][ T10] kernel read not supported for file /eth0 (pid: 10 comm: kworker/0:1) [ 130.593666][ T43] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 130.625529][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.676842][ T43] usb 5-1: config 0 descriptor?? [ 130.754588][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.871412][ T30] audit: type=1400 audit(1763445958.828:389): avc: denied { create } for pid=7541 comm="syz.2.634" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 130.943003][ T30] audit: type=1400 audit(1763445958.828:390): avc: denied { setattr } for pid=7541 comm="syz.2.634" name="file0" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 130.997436][ T30] audit: type=1400 audit(1763445958.858:391): avc: denied { rename } for pid=7541 comm="syz.2.634" name="file0" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.072095][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.072254][ T5822] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 131.093356][ T30] audit: type=1400 audit(1763445959.058:392): avc: denied { read } for pid=7545 comm="syz.3.635" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.211712][ T30] audit: type=1400 audit(1763445959.058:393): avc: denied { open } for pid=7545 comm="syz.3.635" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.345364][ T30] audit: type=1400 audit(1763445959.298:394): avc: denied { mount } for pid=7560 comm="syz.1.638" name="/" dev="autofs" ino=16469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 131.431848][ T30] audit: type=1400 audit(1763445959.308:395): avc: denied { read write } for pid=7560 comm="syz.1.638" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 131.498961][ T30] audit: type=1400 audit(1763445959.308:396): avc: denied { open } for pid=7560 comm="syz.1.638" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 131.582764][ T30] audit: type=1400 audit(1763445959.308:397): avc: denied { ioctl } for pid=7560 comm="syz.1.638" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 131.617925][ T30] audit: type=1400 audit(1763445959.378:398): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 131.949091][ T43] usb 5-1: Cannot set autoneg [ 131.955480][ T43] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 131.967130][ T30] audit: type=1400 audit(1763445959.908:399): avc: denied { setopt } for pid=7581 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.006026][ T43] usb 5-1: USB disconnect, device number 5 [ 132.280562][ T43] net_ratelimit: 1 callbacks suppressed [ 132.280579][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.677165][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.683582][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777443][ T7619] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.801489][ T7619] bond1: (slave lo): Enslaving as a backup interface with an up link [ 132.820274][ T7619] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 132.903942][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.073381][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 133.093370][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 133.121100][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.138850][ T9] usb 4-1: Product: syz [ 133.149138][ T9] usb 4-1: Manufacturer: syz [ 133.153943][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.154695][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 133.165118][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.179884][ T9] usb 4-1: SerialNumber: syz [ 133.186958][ T9] usb 4-1: config 0 descriptor?? [ 133.201928][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 133.314064][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.516556][ T7647] netlink: 96 bytes leftover after parsing attributes in process `syz.2.661'. [ 133.752050][ T1858] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.793702][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.996728][ T1858] usb 5-1: Using ep0 maxpacket: 32 [ 134.003430][ T1858] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 134.011812][ T1858] usb 5-1: config 0 has no interface number 0 [ 134.017909][ T1858] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.078099][ T1858] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 134.089151][ T1858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.103126][ T1858] usb 5-1: Product: syz [ 134.107296][ T1858] usb 5-1: Manufacturer: syz [ 134.112793][ T1858] usb 5-1: SerialNumber: syz [ 134.123090][ T1858] usb 5-1: config 0 descriptor?? [ 134.137509][ T1858] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 134.149883][ T1858] em28xx 5-1:0.132: Video interface 132 found: [ 134.211002][ T9] gspca_sonixj: reg_w1 err -71 [ 134.292659][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 134.303239][ T9] usb 4-1: USB disconnect, device number 6 [ 134.353881][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.371723][ T975] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.525443][ T975] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 134.535266][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.543794][ T975] usb 2-1: Product: syz [ 134.548643][ T1858] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 134.548846][ T975] usb 2-1: Manufacturer: syz [ 134.563785][ T975] usb 2-1: SerialNumber: syz [ 134.575344][ T975] usb 2-1: config 0 descriptor?? [ 134.636245][ T7684] input: syz0 as /devices/virtual/input/input10 [ 134.699216][ T7686] bond1: (slave lo): Releasing backup interface [ 134.706694][ T7686] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 134.728158][ T7686] bridge_slave_0: left allmulticast mode [ 134.735287][ T7686] bridge_slave_0: left promiscuous mode [ 134.741109][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.755695][ T7686] bridge_slave_1: left allmulticast mode [ 134.763883][ T7686] bridge_slave_1: left promiscuous mode [ 134.769648][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.786688][ T7686] bond0: (slave bond_slave_0): Releasing backup interface [ 134.797078][ T7686] bond0: (slave bond_slave_1): Releasing backup interface [ 134.811336][ T7686] team0: Port device team_slave_0 removed [ 134.823405][ T7686] team0: Port device team_slave_1 removed [ 134.829776][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.837726][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.847580][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.856903][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.867131][ T7686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.885199][ T9] wg1 speed is unknown, defaulting to 1000 [ 134.988173][ T975] usb 2-1: Firmware: major: 84, minor: 111, hardware type: UNKNOWN (228) [ 135.173515][ T1858] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 135.183329][ T1858] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 135.189906][ T1858] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 135.191265][ T975] usb 2-1: Read permanent extended address e8:d2:11:09:3c:e9:ea:3a from device [ 135.208261][ T975] usb 2-1: atusb_probe: initialization failed, error = -524 [ 135.215995][ T975] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 135.232009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.251766][ T1858] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 135.259591][ T1858] em28xx 5-1:0.132: analog set to bulk mode. [ 135.266715][ T5861] em28xx 5-1:0.132: Registering V4L2 extension [ 135.280144][ T1858] usb 5-1: USB disconnect, device number 6 [ 135.287969][ T1858] em28xx 5-1:0.132: Disconnecting em28xx [ 135.311741][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 135.313930][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.317993][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 135.358153][ T5861] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 135.365460][ T5861] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 135.381063][ T5861] em28xx 5-1:0.132: No AC97 audio processor [ 135.391427][ T5861] usb 5-1: Decoder not found [ 135.397467][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.406893][ T5861] em28xx 5-1:0.132: failed to create media graph [ 135.410139][ T975] usb 2-1: USB disconnect, device number 5 [ 135.414424][ T5861] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 135.427222][ T5861] em28xx 5-1:0.132: Remote control support is not available for this card. [ 135.436913][ T1858] em28xx 5-1:0.132: Closing input extension [ 135.456148][ T1858] em28xx 5-1:0.132: Freeing device [ 135.578425][ T30] audit: type=1400 audit(1763445963.538:400): avc: denied { ioctl } for pid=7696 comm="syz.2.674" path="socket:[16269]" dev="sockfs" ino=16269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.838930][ T7709] netlink: 'syz.3.679': attribute type 14 has an invalid length. [ 135.847321][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.679'. [ 135.866884][ T3553] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.875691][ T7709] netlink: 'syz.3.679': attribute type 14 has an invalid length. [ 135.875710][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.679'. [ 135.876376][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.909321][ T3553] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.926750][ T3553] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.936000][ T3553] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.183813][ T7721] "syz.4.684" (7721) uses obsolete ecb(arc4) skcipher [ 136.213079][ T7723] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 136.220739][ T7723] netlink: 'syz.3.685': attribute type 4 has an invalid length. [ 136.232857][ T7723] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.685'. [ 136.456173][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.617280][ T7742] netlink: 48 bytes leftover after parsing attributes in process `syz.3.693'. [ 136.879628][ T30] audit: type=1326 audit(1763445964.838:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7751 comm="syz.2.697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5367d8f6c9 code=0x0 [ 137.269497][ T30] audit: type=1400 audit(1763445965.228:402): avc: denied { ioctl } for pid=7763 comm="syz.4.702" path="socket:[17438]" dev="sockfs" ino=17438 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.392177][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.392959][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 137.425400][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 137.477191][ T1858] net_ratelimit: 3 callbacks suppressed [ 137.477208][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.648461][ T7783] syz.3.710: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.648562][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.3.710 Not tainted syzkaller #0 PREEMPT(full) [ 137.648589][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.648601][ T7783] Call Trace: [ 137.648609][ T7783] [ 137.648617][ T7783] dump_stack_lvl+0x16c/0x1f0 [ 137.648642][ T7783] warn_alloc+0x248/0x3a0 [ 137.648676][ T7783] ? __pfx_warn_alloc+0x10/0x10 [ 137.648705][ T7783] ? __pfx_stack_trace_save+0x10/0x10 [ 137.648743][ T7783] ? kasan_save_stack+0x42/0x60 [ 137.648768][ T7783] ? kasan_save_stack+0x33/0x60 [ 137.648788][ T7783] ? kasan_save_track+0x14/0x30 [ 137.648810][ T7783] ? xskq_create+0x52/0x1d0 [ 137.648838][ T7783] ? xsk_setsockopt+0x74e/0x9a0 [ 137.648861][ T7783] ? do_sock_setsockopt+0xf3/0x1d0 [ 137.648895][ T7783] ? xskq_create+0xfb/0x1d0 [ 137.648925][ T7783] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 137.648964][ T7783] ? xskq_create+0xfb/0x1d0 [ 137.648999][ T7783] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.649036][ T7783] ? xskq_create+0xfb/0x1d0 [ 137.649065][ T7783] vmalloc_user_noprof+0x9e/0xe0 [ 137.649101][ T7783] ? xskq_create+0xfb/0x1d0 [ 137.649138][ T7783] xskq_create+0xfb/0x1d0 [ 137.649170][ T7783] xsk_setsockopt+0x74e/0x9a0 [ 137.649200][ T7783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.649228][ T7783] ? find_held_lock+0x2b/0x80 [ 137.649260][ T7783] ? selinux_socket_setsockopt+0x6a/0x80 [ 137.649283][ T7783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.649312][ T7783] do_sock_setsockopt+0xf3/0x1d0 [ 137.649348][ T7783] __sys_setsockopt+0x1a0/0x230 [ 137.649380][ T7783] __x64_sys_setsockopt+0xbd/0x160 [ 137.649405][ T7783] ? do_syscall_64+0x91/0xfa0 [ 137.649425][ T7783] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.649446][ T7783] do_syscall_64+0xcd/0xfa0 [ 137.649469][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.649490][ T7783] RIP: 0033:0x7f351258f6c9 [ 137.649508][ T7783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.649527][ T7783] RSP: 002b:00007f35134d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.649547][ T7783] RAX: ffffffffffffffda RBX: 00007f35127e6090 RCX: 00007f351258f6c9 [ 137.649562][ T7783] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 137.649576][ T7783] RBP: 00007f3512611f91 R08: 0000000000000004 R09: 0000000000000000 [ 137.649589][ T7783] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.649602][ T7783] R13: 00007f35127e6128 R14: 00007f35127e6090 R15: 00007ffef2242a48 [ 137.649633][ T7783] [ 137.659135][ T7783] Mem-Info: [ 137.923237][ T7783] active_anon:15569 inactive_anon:0 isolated_anon:0 [ 137.923237][ T7783] active_file:17010 inactive_file:40907 isolated_file:0 [ 137.923237][ T7783] unevictable:768 dirty:374 writeback:0 [ 137.923237][ T7783] slab_reclaimable:11980 slab_unreclaimable:97682 [ 137.923237][ T7783] mapped:29423 shmem:12111 pagetables:1104 [ 137.923237][ T7783] sec_pagetables:0 bounce:0 [ 137.923237][ T7783] kernel_misc_reclaimable:0 [ 137.923237][ T7783] free:1300674 free_pcp:15242 free_cma:0 [ 137.923289][ T7783] Node 0 active_anon:62276kB inactive_anon:0kB active_file:67992kB inactive_file:163424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117644kB dirty:1496kB writeback:0kB shmem:46908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12012kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.923358][ T7783] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.923405][ T7783] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.923468][ T7783] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 137.923509][ T7783] Node 0 DMA32 free:1303660kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62276kB inactive_anon:0kB active_file:67992kB inactive_file:163424kB unevictable:1536kB writepending:1496kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:39036kB local_pcp:17928kB free_cma:0kB [ 137.923574][ T7783] lowmem_reserve[]: 0 0 1 1 1 [ 137.923613][ T7783] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.923672][ T7783] lowmem_reserve[]: 0 0 0 0 0 [ 137.923711][ T7783] Node 1 Normal free:3883676kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21932kB local_pcp:11116kB free_cma:0kB [ 137.923774][ T7783] lowmem_reserve[]: 0 0 0 0 0 [ 137.923812][ T7783] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.923952][ T7783] Node 0 DMA32: 1043*4kB (UME) 872*8kB (UME) 370*16kB (UME) 631*32kB (UM) 303*64kB (UME) 128*128kB (UME) 69*256kB (UM) 27*512kB (UM) 13*1024kB (UME) 13*2048kB (UME) 283*4096kB (UM) = 1303628kB [ 137.924116][ T7783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 137.924226][ T7783] Node 1 Normal: 185*4kB (U) 43*8kB (UE) 40*16kB (UE) 77*32kB (UE) 23*64kB (UE) 7*128kB (UE) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3883676kB [ 137.924406][ T7783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.924421][ T7783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.924438][ T7783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.924455][ T7783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.924469][ T7783] 70024 total pagecache pages [ 137.924475][ T7783] 0 pages in swap cache [ 137.924480][ T7783] Free swap = 124996kB [ 137.924486][ T7783] Total swap = 124996kB [ 137.924492][ T7783] 2097051 pages RAM [ 137.924497][ T7783] 0 pages HighMem/MovableOnly [ 137.924504][ T7783] 428747 pages reserved [ 137.924509][ T7783] 0 pages cma reserved [ 137.987051][ T1858] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.150544][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 138.383524][ T1858] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 138.383566][ T1858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.383595][ T1858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.383618][ T1858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 138.384665][ T1858] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 138.384695][ T1858] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 138.384718][ T1858] usb 2-1: Manufacturer: syz [ 138.399054][ T1858] usb 2-1: config 0 descriptor?? [ 138.512247][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.861707][ T975] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.889856][ T30] audit: type=1400 audit(1763445966.848:403): avc: denied { create } for pid=7812 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.902832][ T1858] hid_parser_main: 948 callbacks suppressed [ 138.902853][ T1858] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 138.932502][ T1858] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 139.014080][ T975] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 139.022728][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.036128][ T975] usb 5-1: config 0 has no interface number 0 [ 139.042715][ T975] usb 5-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 139.054268][ T975] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 139.072523][ T975] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 139.084168][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.093030][ T975] usb 5-1: Product: syz [ 139.098113][ T975] usb 5-1: Manufacturer: syz [ 139.106447][ T975] usb 5-1: SerialNumber: syz [ 139.114119][ T975] usb 5-1: config 0 descriptor?? [ 139.123030][ T975] HFC-S_USB 5-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 139.338833][ T1858] usb 5-1: USB disconnect, device number 7 [ 139.457950][ T43] usb 2-1: USB disconnect, device number 6 [ 139.472015][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.472105][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 139.484222][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 139.553946][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.878183][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.904323][ T30] audit: type=1326 audit(1763445967.868:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.4.731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63f678f6c9 code=0x0 [ 140.082542][ T7839] ======================================================= [ 140.082542][ T7839] WARNING: The mand mount option has been deprecated and [ 140.082542][ T7839] and is ignored by this kernel. Remove the mand [ 140.082542][ T7839] option from the mount to silence this warning. [ 140.082542][ T7839] ======================================================= [ 140.129193][ T30] audit: type=1400 audit(1763445968.088:405): avc: denied { mount } for pid=7838 comm="syz.1.735" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.162925][ T30] audit: type=1400 audit(1763445968.118:406): avc: denied { mounton } for pid=7838 comm="syz.1.735" path="/150/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 140.223279][ T30] audit: type=1400 audit(1763445968.188:407): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.427826][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 140.593538][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.768224][ T7858] ALSA: seq fatal error: cannot create timer (-16) [ 141.242890][ T7874] Bluetooth: hci0: too big key_count value 32768 [ 141.321519][ T30] audit: type=1400 audit(1763445969.278:408): avc: denied { read } for pid=7877 comm="syz.2.754" path="socket:[17679]" dev="sockfs" ino=17679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 141.555056][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 141.555771][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.561151][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 141.635482][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.643617][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.712563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.026468][ T30] audit: type=1400 audit(1763445969.988:409): avc: denied { bind } for pid=7890 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.672776][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.933517][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.012586][ T7927] SELinux: failed to load policy [ 143.297121][ T7935] binder: 7934:7935 ioctl c0306201 0 returned -14 [ 143.713077][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.782349][ T7947] kvm: apic: phys broadcast and lowest prio [ 143.791813][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.961801][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 143.973496][ T43] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 144.003005][ T43] usb 5-1: config 0 has no interface number 0 [ 144.009132][ T43] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.033785][ T43] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 144.043276][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.051269][ T43] usb 5-1: Product: syz [ 144.071676][ T43] usb 5-1: Manufacturer: syz [ 144.081688][ T43] usb 5-1: SerialNumber: syz [ 144.095300][ T43] usb 5-1: config 0 descriptor?? [ 144.119268][ T43] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 144.147844][ T7956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 144.209524][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.752847][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.947639][ T43] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 145.151096][ T30] audit: type=1400 audit(1763445973.108:410): avc: denied { setopt } for pid=7971 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.211020][ C1] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 145.218598][ C1] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 145.226017][ C1] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 145.233310][ C1] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 145.240479][ C1] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 145.247772][ C1] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 145.255066][ C1] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 145.262280][ T43] usb 5-1: USB disconnect, device number 8 [ 145.791927][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.366656][ T7993] fuse: Bad value for 'fd' [ 146.832137][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.232813][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.874133][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.912184][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.952123][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.272067][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.991954][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.232132][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.872038][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.031885][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.071990][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.312028][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.112866][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.444396][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.152115][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.192827][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.232136][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.472002][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.282323][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.312203][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.352139][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.511947][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.402366][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.481796][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.442033][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.472339][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.551936][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.512218][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.561982][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.592078][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.600198][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.632062][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.673253][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.634556][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.712358][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.752248][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.072333][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.802098][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.672485][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.833197][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.872349][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.913420][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.713296][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.952165][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.992143][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.033707][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.752918][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.072802][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.112209][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.673108][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.151883][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.791976][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.192304][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.232006][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.272211][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.832105][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.311896][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.352015][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.392329][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.872759][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.432671][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.481995][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.271948][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.512301][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.912849][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.552307][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.591951][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.632794][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.952116][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.122539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.134447][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.140738][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.672178][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.712041][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.761972][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.991996][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.802043][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.842117][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.244925][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.882064][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.032337][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.912363][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.952477][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.992325][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.081955][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.032160][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.072280][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.112065][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.121963][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.152300][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.202172][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.841872][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.154535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.232101][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.281957][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.312123][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.192384][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.352224][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.393069][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.431952][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.592251][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.600458][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.482454][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.512571][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.551952][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.631856][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.592015][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.632684][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.672210][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.684061][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.712357][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.753599][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.715463][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.792360][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.193557][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.202505][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.212572][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.221955][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.872192][ T5861] net_ratelimit: 2 callbacks suppressed [ 225.872210][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.913567][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.874924][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.952610][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.001915][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.032026][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.912808][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.922475][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.931139][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.939841][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.072156][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.122170][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.152822][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.802003][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.952874][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.192315][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.271958][ T5919] net_ratelimit: 1 callbacks suppressed [ 236.271970][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.992744][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.312200][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.352395][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.392961][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.032041][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.441963][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.481927][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.512233][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.072780][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.392974][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.552187][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.592029][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.632349][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.112727][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.672176][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.712127][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.752783][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.162990][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.792205][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.832063][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.872252][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.192047][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.912333][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.992004][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.952144][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.002717][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.232441][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.554044][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.560349][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.032195][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.071959][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.113116][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.272377][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.152440][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.192159][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.242555][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.312970][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.272000][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.591975][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.313033][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.352379][ T1858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.360668][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.392250][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.441974][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.394763][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.471944][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.512036][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.552002][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.431930][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.592034][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.600753][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.610705][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.620367][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.632139][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.672305][ T5921] net_ratelimit: 1 callbacks suppressed [ 272.672321][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.471983][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.713193][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.752300][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.802315][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.511932][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.831978][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.871917][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.911944][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.551818][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.952037][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.001777][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.792449][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.033434][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.601883][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.082198][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.112424][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.152180][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.631971][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.191932][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.232385][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.272111][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.672429][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.322261][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.352523][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.391931][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 291.392323][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.399577][ T31] Not tainted syzkaller #0 [ 291.413775][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.415285][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.430593][ T31] task:kworker/1:0 state:D stack:22648 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 291.442684][ T31] Workqueue: events rfkill_op_handler [ 291.448179][ T31] Call Trace: [ 291.451477][ T31] [ 291.454489][ T31] __schedule+0x1190/0x5de0 [ 291.459000][ T31] ? check_path.constprop.0+0x24/0x50 [ 291.464413][ T31] ? __lock_acquire+0x622/0x1c90 [ 291.469372][ T31] ? __pfx___schedule+0x10/0x10 [ 291.474331][ T31] ? find_held_lock+0x2b/0x80 [ 291.479017][ T31] ? schedule+0x2d7/0x3a0 [ 291.483446][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 291.488037][ T31] schedule+0xe7/0x3a0 [ 291.492409][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.497884][ T31] __mutex_lock+0x818/0x1060 [ 291.502522][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 291.507108][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.512153][ T31] ? kobject_uevent_env+0x2e5/0x1870 [ 291.517437][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 291.522579][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 291.527165][ T31] nfc_dev_down+0x2d/0x2e0 [ 291.531562][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 291.536606][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 291.542353][ T31] rfkill_set_block+0x1fe/0x550 [ 291.547202][ T31] rfkill_epo+0x8e/0x1d0 [ 291.551427][ T31] rfkill_op_handler+0x262/0x280 [ 291.557536][ T31] process_one_work+0x9cf/0x1b70 [ 291.562559][ T31] ? __pfx_process_one_work+0x10/0x10 [ 291.567934][ T31] ? assign_work+0x1a0/0x250 [ 291.572538][ T31] worker_thread+0x6c8/0xf10 [ 291.577133][ T31] ? __pfx_worker_thread+0x10/0x10 [ 291.582272][ T31] kthread+0x3c5/0x780 [ 291.586333][ T31] ? __pfx_kthread+0x10/0x10 [ 291.590901][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.595689][ T31] ? __pfx_kthread+0x10/0x10 [ 291.600276][ T31] ret_from_fork+0x675/0x7d0 [ 291.604933][ T31] ? __pfx_kthread+0x10/0x10 [ 291.609521][ T31] ret_from_fork_asm+0x1a/0x30 [ 291.614355][ T31] [ 291.617486][ T31] INFO: task kworker/1:3:5810 blocked for more than 143 seconds. [ 291.625263][ T31] Not tainted syzkaller #0 [ 291.630175][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.639023][ T31] task:kworker/1:3 state:D stack:22440 pid:5810 tgid:5810 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 291.651096][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 291.657813][ T31] Call Trace: [ 291.661081][ T31] [ 291.664057][ T31] __schedule+0x1190/0x5de0 [ 291.668573][ T31] ? find_held_lock+0x2b/0x80 [ 291.673274][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.679088][ T31] ? __pfx___schedule+0x10/0x10 [ 291.684008][ T31] ? find_held_lock+0x2b/0x80 [ 291.688684][ T31] ? schedule+0x2d7/0x3a0 [ 291.693032][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 291.699355][ T31] schedule+0xe7/0x3a0 [ 291.703478][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.708941][ T31] __mutex_lock+0x818/0x1060 [ 291.713723][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 291.714117][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.720135][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.733532][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.739384][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 291.745767][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 291.751969][ T31] process_one_work+0x9cf/0x1b70 [ 291.756920][ T31] ? __pfx_process_one_work+0x10/0x10 [ 291.762425][ T31] ? assign_work+0x1a0/0x250 [ 291.767015][ T31] worker_thread+0x6c8/0xf10 [ 291.771589][ T31] ? __pfx_worker_thread+0x10/0x10 [ 291.776746][ T31] kthread+0x3c5/0x780 [ 291.780813][ T31] ? __pfx_kthread+0x10/0x10 [ 291.785435][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.790196][ T31] ? __pfx_kthread+0x10/0x10 [ 291.795002][ T31] ret_from_fork+0x675/0x7d0 [ 291.799585][ T31] ? __pfx_kthread+0x10/0x10 [ 291.804256][ T31] ret_from_fork_asm+0x1a/0x30 [ 291.809033][ T31] [ 291.812155][ T31] INFO: task syz.0.613:7463 blocked for more than 143 seconds. [ 291.819686][ T31] Not tainted syzkaller #0 [ 291.824648][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.833359][ T31] task:syz.0.613 state:D stack:26712 pid:7463 tgid:7463 ppid:5821 task_flags:0x400040 flags:0x00080002 [ 291.845391][ T31] Call Trace: [ 291.848660][ T31] [ 291.851572][ T31] __schedule+0x1190/0x5de0 [ 291.856094][ T31] ? check_path.constprop.0+0x24/0x50 [ 291.861472][ T31] ? __lock_acquire+0x622/0x1c90 [ 291.866469][ T31] ? __pfx___schedule+0x10/0x10 [ 291.871325][ T31] ? find_held_lock+0x2b/0x80 [ 291.876168][ T31] ? schedule+0x2d7/0x3a0 [ 291.880506][ T31] ? rfkill_unregister+0xec/0x2c0 [ 291.885660][ T31] schedule+0xe7/0x3a0 [ 291.889741][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.895255][ T31] __mutex_lock+0x818/0x1060 [ 291.899847][ T31] ? class_to_subsys+0x10f/0x160 [ 291.904814][ T31] ? rfkill_unregister+0xec/0x2c0 [ 291.909823][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.914860][ T31] ? device_del+0x6b6/0x9f0 [ 291.919360][ T31] ? __pfx_device_del+0x10/0x10 [ 291.924300][ T31] ? rfkill_unregister+0xec/0x2c0 [ 291.929324][ T31] rfkill_unregister+0xec/0x2c0 [ 291.934207][ T31] nfc_unregister_device+0x94/0x330 [ 291.939403][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 291.945158][ T31] virtual_ncidev_close+0x4b/0xa0 [ 291.950181][ T31] __fput+0x402/0xb70 [ 291.954199][ T31] task_work_run+0x150/0x240 [ 291.958786][ T31] ? __pfx_task_work_run+0x10/0x10 [ 291.963973][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 291.969697][ T31] exit_to_user_mode_loop+0xec/0x130 [ 291.974997][ T31] do_syscall_64+0x426/0xfa0 [ 291.979584][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.985519][ T31] RIP: 0033:0x7f2f8318f6c9 [ 291.989926][ T31] RSP: 002b:00007fffbd7644d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 291.998371][ T31] RAX: 0000000000000000 RBX: 00007f2f833e7da0 RCX: 00007f2f8318f6c9 [ 292.006429][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 292.014736][ T31] RBP: 00007f2f833e7da0 R08: 000000000000008c R09: 00000006bd7647cf [ 292.022770][ T31] R10: 00007f2f833e7cb0 R11: 0000000000000246 R12: 000000000001fb7d [ 292.030852][ T31] R13: 00007f2f833e6090 R14: ffffffffffffffff R15: 00007fffbd7645f0 [ 292.039875][ T31] [ 292.042984][ T31] INFO: task syz-executor:7970 blocked for more than 144 seconds. [ 292.050801][ T31] Not tainted syzkaller #0 [ 292.055755][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.064469][ T31] task:syz-executor state:D stack:28408 pid:7970 tgid:7970 ppid:1 task_flags:0x400040 flags:0x00080000 [ 292.076397][ T31] Call Trace: [ 292.079669][ T31] [ 292.082634][ T31] __schedule+0x1190/0x5de0 [ 292.087139][ T31] ? check_path.constprop.0+0x24/0x50 [ 292.092778][ T31] ? __lock_acquire+0x622/0x1c90 [ 292.097746][ T31] ? __pfx___schedule+0x10/0x10 [ 292.102710][ T31] ? find_held_lock+0x2b/0x80 [ 292.107514][ T31] ? schedule+0x2d7/0x3a0 [ 292.111901][ T31] ? rfkill_register+0x3a/0xb40 [ 292.116765][ T31] schedule+0xe7/0x3a0 [ 292.120823][ T31] schedule_preempt_disabled+0x13/0x30 [ 292.126485][ T31] __mutex_lock+0x818/0x1060 [ 292.131091][ T31] ? rfkill_register+0x3a/0xb40 [ 292.135968][ T31] ? __pfx___debug_object_init+0x10/0x10 [ 292.141603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 292.146970][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 292.152378][ T31] ? __init_waitqueue_head+0xca/0x150 [ 292.157752][ T31] ? rfkill_register+0x3a/0xb40 [ 292.162726][ T31] ? rfkill_alloc+0x25b/0x330 [ 292.167404][ T31] rfkill_register+0x3a/0xb40 [ 292.172150][ T31] hci_register_dev+0x3cc/0xc60 [ 292.177005][ T31] __vhci_create_device+0x357/0x880 [ 292.182251][ T31] vhci_write+0x2c0/0x480 [ 292.186578][ T31] vfs_write+0x7d3/0x11d0 [ 292.190886][ T31] ? __pfx_vhci_write+0x10/0x10 [ 292.195972][ T31] ? __pfx_vfs_write+0x10/0x10 [ 292.200746][ T31] ? find_held_lock+0x2b/0x80 [ 292.205561][ T31] ? find_held_lock+0x2b/0x80 [ 292.210240][ T31] ksys_write+0x12a/0x250 [ 292.214603][ T31] ? __pfx_ksys_write+0x10/0x10 [ 292.219456][ T31] do_syscall_64+0xcd/0xfa0 [ 292.224014][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.229903][ T31] RIP: 0033:0x7f39c298e140 [ 292.234508][ T31] RSP: 002b:00007ffeaa526ee8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 292.243016][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39c298e140 [ 292.250984][ T31] RDX: 0000000000000002 RSI: 00007ffeaa526efa RDI: 00000000000000ca [ 292.258985][ T31] RBP: 00007f39c2be67b8 R08: 0000000000000000 R09: 00007f39c371d6c0 [ 292.267016][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 292.275093][ T31] R13: 0000000000000003 R14: 00007ffeaa527248 R15: 0000000000000000 [ 292.283160][ T31] [ 292.286179][ T31] INFO: task syz.3.793:7972 blocked for more than 144 seconds. [ 292.293759][ T31] Not tainted syzkaller #0 [ 292.298684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.307376][ T31] task:syz.3.793 state:D stack:25384 pid:7972 tgid:7971 ppid:5817 task_flags:0x400140 flags:0x00080002 [ 292.319327][ T31] Call Trace: [ 292.322720][ T31] [ 292.325646][ T31] __schedule+0x1190/0x5de0 [ 292.330134][ T31] ? check_path.constprop.0+0x24/0x50 [ 292.335536][ T31] ? __lock_acquire+0x622/0x1c90 [ 292.340469][ T31] ? __pfx___schedule+0x10/0x10 [ 292.345525][ T31] ? find_held_lock+0x2b/0x80 [ 292.350217][ T31] ? schedule+0x2d7/0x3a0 [ 292.354790][ T31] ? rfkill_register+0x3a/0xb40 [ 292.359670][ T31] schedule+0xe7/0x3a0 [ 292.363839][ T31] schedule_preempt_disabled+0x13/0x30 [ 292.369305][ T31] __mutex_lock+0x818/0x1060 [ 292.373907][ T31] ? rfkill_register+0x3a/0xb40 [ 292.378759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 292.383843][ T31] ? sk_skb_reason_drop+0x136/0x1a0 [ 292.389045][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 292.394394][ T31] ? nl80211_common_reg_change_event+0x45a/0x5d0 [ 292.400720][ T31] ? __pfx_nl80211_common_reg_change_event+0x10/0x10 [ 292.407524][ T31] ? rfkill_register+0x3a/0xb40 [ 292.412416][ T31] rfkill_register+0x3a/0xb40 [ 292.417101][ T31] wiphy_register+0x244d/0x2b20 [ 292.421988][ T31] ? netdev_run_todo+0x864/0x1320 [ 292.427018][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 292.432380][ T31] ieee80211_register_hw+0x253d/0x4120 [ 292.437845][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 292.443856][ T31] ? __pfx___debug_object_init+0x10/0x10 [ 292.443905][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.457686][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 292.463675][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 292.469504][ T31] ? __hrtimer_setup+0x176/0x280 [ 292.474559][ T31] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 292.480300][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 292.486434][ T31] hwsim_new_radio_nl+0xba2/0x1330 [ 292.491554][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 292.497134][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 292.504566][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 292.512001][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 292.517549][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 292.523643][ T31] ? bpf_lsm_capable+0x9/0x10 [ 292.528312][ T31] ? security_capable+0x7e/0x260 [ 292.533313][ T31] ? ns_capable+0xd7/0x110 [ 292.537738][ T31] genl_rcv_msg+0x55c/0x800 [ 292.542397][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.547425][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 292.553058][ T31] netlink_rcv_skb+0x158/0x420 [ 292.557828][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.562877][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.568173][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 292.573493][ T31] genl_rcv+0x28/0x40 [ 292.577469][ T31] netlink_unicast+0x5aa/0x870 [ 292.582278][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 292.587584][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 292.592399][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.597696][ T31] ____sys_sendmsg+0xa98/0xc70 [ 292.602500][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 292.607956][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.613274][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 292.618652][ T31] ? try_to_wake_up+0xa67/0x1870 [ 292.623608][ T31] ___sys_sendmsg+0x134/0x1d0 [ 292.628287][ T31] ? find_held_lock+0x2b/0x80 [ 292.633000][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.638196][ T31] ? __lock_acquire+0x622/0x1c90 [ 292.643177][ T31] __sys_sendmsg+0x16d/0x220 [ 292.647768][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.652998][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 292.657946][ T31] do_syscall_64+0xcd/0xfa0 [ 292.662482][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.668367][ T31] RIP: 0033:0x7f351258f6c9 [ 292.672937][ T31] RSP: 002b:00007f35134f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.681350][ T31] RAX: ffffffffffffffda RBX: 00007f35127e5fa0 RCX: 00007f351258f6c9 [ 292.689592][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 292.697632][ T31] RBP: 00007f3512611f91 R08: 0000000000000000 R09: 0000000000000000 [ 292.705627][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.713633][ T31] R13: 00007f35127e6038 R14: 00007f35127e5fa0 R15: 00007ffef2242a48 [ 292.721608][ T31] [ 292.724667][ T31] INFO: task syz.4.797:7979 blocked for more than 144 seconds. [ 292.732295][ T31] Not tainted syzkaller #0 [ 292.737215][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.745909][ T31] task:syz.4.797 state:D stack:26760 pid:7979 tgid:7978 ppid:5819 task_flags:0x400040 flags:0x00080002 [ 292.757938][ T31] Call Trace: [ 292.761197][ T31] [ 292.764166][ T31] __schedule+0x1190/0x5de0 [ 292.768670][ T31] ? check_path.constprop.0+0x24/0x50 [ 292.774087][ T31] ? __lock_acquire+0x622/0x1c90 [ 292.779018][ T31] ? __pfx___schedule+0x10/0x10 [ 292.783899][ T31] ? find_held_lock+0x2b/0x80 [ 292.788575][ T31] ? schedule+0x2d7/0x3a0 [ 292.792936][ T31] ? rfkill_register+0x3a/0xb40 [ 292.797787][ T31] schedule+0xe7/0x3a0 [ 292.801877][ T31] schedule_preempt_disabled+0x13/0x30 [ 292.807337][ T31] __mutex_lock+0x818/0x1060 [ 292.811968][ T31] ? rfkill_register+0x3a/0xb40 [ 292.816832][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 292.821881][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 292.827244][ T31] ? __init_waitqueue_head+0xca/0x150 [ 292.832701][ T31] ? rfkill_register+0x3a/0xb40 [ 292.837549][ T31] rfkill_register+0x3a/0xb40 [ 292.842278][ T31] nfc_register_device+0x11f/0x3c0 [ 292.847404][ T31] nci_register_device+0x7f1/0xb80 [ 292.852560][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 292.858194][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 292.863586][ T31] virtual_ncidev_open+0x141/0x220 [ 292.868700][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 292.874392][ T31] misc_open+0x26d/0x450 [ 292.878630][ T31] ? __pfx_misc_open+0x10/0x10 [ 292.883405][ T31] chrdev_open+0x234/0x6a0 [ 292.887818][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 292.892835][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 292.899171][ T31] do_dentry_open+0x982/0x1530 [ 292.903968][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 292.908905][ T31] vfs_open+0x82/0x3f0 [ 292.913055][ T31] path_openat+0x1de4/0x2cb0 [ 292.917649][ T31] ? __pfx_path_openat+0x10/0x10 [ 292.922616][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 292.927547][ T31] do_filp_open+0x20b/0x470 [ 292.932081][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 292.937110][ T31] ? alloc_fd+0x471/0x7d0 [ 292.941420][ T31] do_sys_openat2+0x11b/0x1d0 [ 292.946129][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.951326][ T31] ? find_held_lock+0x2b/0x80 [ 292.956060][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 292.961007][ T31] __x64_sys_openat+0x174/0x210 [ 292.965928][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.971302][ T31] ? do_user_addr_fault+0x843/0x1370 [ 292.976619][ T31] do_syscall_64+0xcd/0xfa0 [ 292.981128][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.987055][ T31] RIP: 0033:0x7f63f678f6c9 [ 292.991462][ T31] RSP: 002b:00007f63f75f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.999903][ T31] RAX: ffffffffffffffda RBX: 00007f63f69e5fa0 RCX: 00007f63f678f6c9 [ 293.007909][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 293.015924][ T31] RBP: 00007f63f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.023907][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.031910][ T31] R13: 00007f63f69e6038 R14: 00007f63f69e5fa0 R15: 00007ffdf59103f8 [ 293.039892][ T31] [ 293.042940][ T31] INFO: task syz.4.797:7987 blocked for more than 145 seconds. [ 293.050466][ T31] Not tainted syzkaller #0 [ 293.055429][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.064108][ T31] task:syz.4.797 state:D stack:28824 pid:7987 tgid:7978 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 293.076052][ T31] Call Trace: [ 293.079314][ T31] [ 293.082266][ T31] __schedule+0x1190/0x5de0 [ 293.086809][ T31] ? __lock_acquire+0x622/0x1c90 [ 293.091793][ T31] ? __pfx___schedule+0x10/0x10 [ 293.096659][ T31] ? find_held_lock+0x2b/0x80 [ 293.101345][ T31] ? schedule+0x2d7/0x3a0 [ 293.105726][ T31] ? genl_rcv_msg+0x577/0x800 [ 293.110394][ T31] schedule+0xe7/0x3a0 [ 293.114508][ T31] schedule_preempt_disabled+0x13/0x30 [ 293.119971][ T31] __mutex_lock+0x818/0x1060 [ 293.124574][ T31] ? genl_rcv_msg+0x577/0x800 [ 293.129245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 293.134297][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 293.139674][ T31] ? kmalloc_reserve+0x18b/0x2c0 [ 293.144623][ T31] ? __alloc_skb+0x166/0x380 [ 293.149210][ T31] ? netlink_alloc_large_skb+0x69/0x140 [ 293.154870][ T31] ? netlink_sendmsg+0x698/0xdd0 [ 293.159811][ T31] ? __sys_sendto+0x4a3/0x520 [ 293.164540][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 293.169833][ T31] ? genl_rcv_msg+0x577/0x800 [ 293.174549][ T31] genl_rcv_msg+0x577/0x800 [ 293.179049][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.184079][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 293.189009][ T31] ? __lock_acquire+0x622/0x1c90 [ 293.193976][ T31] netlink_rcv_skb+0x158/0x420 [ 293.198742][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.203793][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.209095][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 293.214420][ T31] genl_rcv+0x28/0x40 [ 293.218391][ T31] netlink_unicast+0x5aa/0x870 [ 293.223211][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 293.228517][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 293.233417][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.238713][ T31] __sys_sendto+0x4a3/0x520 [ 293.243229][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 293.248257][ T31] ? find_held_lock+0x2b/0x80 [ 293.252980][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 293.257742][ T31] ? do_syscall_64+0x91/0xfa0 [ 293.262425][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.267617][ T31] do_syscall_64+0xcd/0xfa0 [ 293.272155][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.278042][ T31] RIP: 0033:0x7f63f679155c [ 293.282476][ T31] RSP: 002b:00007f63f75d6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 293.290883][ T31] RAX: ffffffffffffffda RBX: 00007f63f75d6fc0 RCX: 00007f63f679155c [ 293.298925][ T31] RDX: 000000000000001c RSI: 00007f63f75d7010 RDI: 0000000000000005 [ 293.306911][ T31] RBP: 0000000000000000 R08: 00007f63f75d6f14 R09: 000000000000000c [ 293.314997][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 293.322991][ T31] R13: 00007f63f75d6f68 R14: 00007f63f75d7010 R15: 0000000000000000 [ 293.330952][ T31] [ 293.334002][ T31] INFO: task syz.1.800:7991 blocked for more than 145 seconds. [ 293.341528][ T31] Not tainted syzkaller #0 [ 293.346482][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.355198][ T31] task:syz.1.800 state:D stack:28376 pid:7991 tgid:7990 ppid:5809 task_flags:0x400040 flags:0x00080002 [ 293.367156][ T31] Call Trace: [ 293.370426][ T31] [ 293.373387][ T31] __schedule+0x1190/0x5de0 [ 293.377907][ T31] ? __lock_acquire+0x622/0x1c90 [ 293.382893][ T31] ? __pfx___schedule+0x10/0x10 [ 293.387757][ T31] ? find_held_lock+0x2b/0x80 [ 293.393132][ T31] ? schedule+0x2d7/0x3a0 [ 293.397509][ T31] ? misc_open+0x63/0x450 [ 293.402234][ T31] schedule+0xe7/0x3a0 [ 293.406385][ T31] schedule_preempt_disabled+0x13/0x30 [ 293.412508][ T31] __mutex_lock+0x818/0x1060 [ 293.417117][ T31] ? misc_open+0x63/0x450 [ 293.421445][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 293.426752][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 293.431872][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 293.437501][ T31] ? __pfx_misc_open+0x10/0x10 [ 293.442291][ T31] ? misc_open+0x63/0x450 [ 293.446613][ T31] misc_open+0x63/0x450 [ 293.450751][ T31] ? __pfx_misc_open+0x10/0x10 [ 293.455541][ T31] chrdev_open+0x234/0x6a0 [ 293.459955][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 293.464905][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 293.471233][ T31] do_dentry_open+0x982/0x1530 [ 293.476515][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 293.476597][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.481465][ T31] vfs_open+0x82/0x3f0 [ 293.493636][ T31] path_openat+0x1de4/0x2cb0 [ 293.498296][ T31] ? __pfx_path_openat+0x10/0x10 [ 293.503363][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 293.508331][ T31] do_filp_open+0x20b/0x470 [ 293.513035][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 293.518099][ T31] ? alloc_fd+0x471/0x7d0 [ 293.522487][ T31] do_sys_openat2+0x11b/0x1d0 [ 293.527170][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.532525][ T31] ? find_held_lock+0x2b/0x80 [ 293.537205][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 293.542300][ T31] __x64_sys_openat+0x174/0x210 [ 293.547153][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 293.552547][ T31] do_syscall_64+0xcd/0xfa0 [ 293.557046][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.562975][ T31] RIP: 0033:0x7f0ee558f6c9 [ 293.567383][ T31] RSP: 002b:00007f0ee63fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.575810][ T31] RAX: ffffffffffffffda RBX: 00007f0ee57e5fa0 RCX: 00007f0ee558f6c9 [ 293.583808][ T31] RDX: 0000000000000002 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 293.591782][ T31] RBP: 00007f0ee5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.599743][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.607732][ T31] R13: 00007f0ee57e6038 R14: 00007f0ee57e5fa0 R15: 00007ffeb112d398 [ 293.615740][ T31] [ 293.618758][ T31] INFO: task syz.2.801:7995 blocked for more than 145 seconds. [ 293.626364][ T31] Not tainted syzkaller #0 [ 293.631291][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.639976][ T31] task:syz.2.801 state:D stack:28856 pid:7995 tgid:7994 ppid:5815 task_flags:0x400140 flags:0x00080002 [ 293.651952][ T31] Call Trace: [ 293.655212][ T31] [ 293.658126][ T31] __schedule+0x1190/0x5de0 [ 293.662657][ T31] ? __lock_acquire+0x622/0x1c90 [ 293.667597][ T31] ? __pfx___schedule+0x10/0x10 [ 293.672529][ T31] ? find_held_lock+0x2b/0x80 [ 293.677207][ T31] ? schedule+0x2d7/0x3a0 [ 293.681518][ T31] ? misc_open+0x63/0x450 [ 293.685884][ T31] schedule+0xe7/0x3a0 [ 293.689955][ T31] schedule_preempt_disabled+0x13/0x30 [ 293.695446][ T31] __mutex_lock+0x818/0x1060 [ 293.700028][ T31] ? misc_open+0x63/0x450 [ 293.704374][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 293.709396][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 293.714589][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 293.720222][ T31] ? __pfx_misc_open+0x10/0x10 [ 293.724999][ T31] ? misc_open+0x63/0x450 [ 293.729325][ T31] misc_open+0x63/0x450 [ 293.733515][ T31] ? __pfx_misc_open+0x10/0x10 [ 293.738273][ T31] chrdev_open+0x234/0x6a0 [ 293.742715][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 293.747649][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 293.754032][ T31] do_dentry_open+0x982/0x1530 [ 293.758797][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 293.763790][ T31] vfs_open+0x82/0x3f0 [ 293.767866][ T31] path_openat+0x1de4/0x2cb0 [ 293.772513][ T31] ? __pfx_path_openat+0x10/0x10 [ 293.777452][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 293.782434][ T31] do_filp_open+0x20b/0x470 [ 293.786933][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 293.792038][ T31] ? alloc_fd+0x471/0x7d0 [ 293.796367][ T31] do_sys_openat2+0x11b/0x1d0 [ 293.801025][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.806246][ T31] ? find_held_lock+0x2b/0x80 [ 293.810923][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 293.815900][ T31] __x64_sys_openat+0x174/0x210 [ 293.820751][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 293.826134][ T31] ? do_user_addr_fault+0x843/0x1370 [ 293.831431][ T31] do_syscall_64+0xcd/0xfa0 [ 293.835970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.841884][ T31] RIP: 0033:0x7f5367d8df10 [ 293.846273][ T31] RSP: 002b:00007f5368bebef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 293.854706][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5367d8df10 [ 293.862722][ T31] RDX: 0000000000000002 RSI: 00007f5367e11c6c RDI: 00000000ffffff9c [ 293.870669][ T31] RBP: 00007f5367e11c6c R08: 0000000000000000 R09: 0000000000000000 [ 293.878894][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 293.886888][ T31] R13: 0000000000000036 R14: 0000200000000340 R15: 00007ffe4693b178 [ 293.894918][ T31] [ 293.897958][ T31] [ 293.897958][ T31] Showing all locks held in the system: [ 293.905744][ T31] 4 locks held by kworker/1:0/24: [ 293.910760][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 293.921283][ T31] #1: ffffc900001e7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 293.931687][ T31] #2: ffffffff90592348 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 293.941150][ T31] #3: ffff88802a3be100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 293.950124][ T31] 1 lock held by khungtaskd/31: [ 293.954993][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 293.964861][ T31] 2 locks held by getty/5573: [ 293.969521][ T31] #0: ffff88803159f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 293.979296][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 293.989442][ T31] 3 locks held by kworker/1:3/5810: [ 293.994665][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 294.005146][ T31] #1: ffffc90003167d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 294.018044][ T31] #2: ffffffff90592348 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 294.029479][ T31] 2 locks held by syz.0.613/7463: [ 294.034550][ T31] #0: ffff88802a3be100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 294.044347][ T31] #1: ffffffff90592348 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 294.054534][ T31] 2 locks held by syz-executor/7970: [ 294.059805][ T31] #0: ffff888024e1a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 294.069245][ T31] #1: ffffffff90592348 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 294.079208][ T31] 3 locks held by syz.3.793/7972: [ 294.084240][ T31] #0: ffffffff9018b790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 294.092484][ T31] #1: ffffffff9018b848 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 294.101425][ T31] #2: ffffffff90592348 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 294.111384][ T31] 3 locks held by syz.4.797/7979: [ 294.116425][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.124891][ T31] #1: ffff888024bd3100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 294.134506][ T31] #2: ffffffff90592348 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 294.144448][ T31] 2 locks held by syz.4.797/7987: [ 294.149457][ T31] #0: ffffffff9018b790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 294.157656][ T31] #1: ffffffff9018b848 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 294.166656][ T31] 1 lock held by syz.1.800/7991: [ 294.171564][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.180041][ T31] 1 lock held by syz.2.801/7995: [ 294.185028][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.193555][ T31] 1 lock held by syz-executor/7997: [ 294.198749][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.208010][ T31] 1 lock held by syz-executor/8000: [ 294.213347][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.221900][ T31] 1 lock held by syz-executor/8001: [ 294.227103][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.235791][ T31] 1 lock held by syz-executor/8003: [ 294.240997][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.249549][ T31] 1 lock held by syz-executor/8009: [ 294.254771][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.263260][ T31] 1 lock held by syz-executor/8011: [ 294.268445][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.276903][ T31] 1 lock held by syz-executor/8014: [ 294.282202][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.290667][ T31] 1 lock held by syz-executor/8015: [ 294.295888][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.304384][ T31] 1 lock held by syz-executor/8017: [ 294.309556][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.318039][ T31] 1 lock held by syz-executor/8023: [ 294.323346][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.332097][ T31] 1 lock held by syz-executor/8025: [ 294.337363][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.345897][ T31] 1 lock held by syz-executor/8028: [ 294.351095][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.359610][ T31] 1 lock held by syz-executor/8029: [ 294.364858][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.373330][ T31] 1 lock held by syz-executor/8031: [ 294.378519][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 294.386979][ T31] [ 294.389289][ T31] ============================================= [ 294.389289][ T31] [ 294.397732][ T31] NMI backtrace for cpu 0 [ 294.397750][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 294.397770][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.397782][ T31] Call Trace: [ 294.397788][ T31] [ 294.397795][ T31] dump_stack_lvl+0x116/0x1f0 [ 294.397817][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 294.397841][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 294.397869][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 294.397895][ T31] watchdog+0xf3f/0x1170 [ 294.397923][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.397949][ T31] ? __pfx_watchdog+0x10/0x10 [ 294.397972][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.397993][ T31] ? __kthread_parkme+0x19e/0x250 [ 294.398022][ T31] ? __pfx_watchdog+0x10/0x10 [ 294.398046][ T31] kthread+0x3c5/0x780 [ 294.398067][ T31] ? __pfx_kthread+0x10/0x10 [ 294.398089][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.398115][ T31] ? __pfx_kthread+0x10/0x10 [ 294.398136][ T31] ret_from_fork+0x675/0x7d0 [ 294.398154][ T31] ? __pfx_kthread+0x10/0x10 [ 294.398175][ T31] ret_from_fork_asm+0x1a/0x30 [ 294.398217][ T31] [ 294.398224][ T31] Sending NMI from CPU 0 to CPUs 1: [ 294.518159][ C1] NMI backtrace for cpu 1 [ 294.518173][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 294.518195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.518207][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 294.518240][ C1] Code: b7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 65 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 294.518258][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 294.518272][ C1] RAX: 000000000011e60f RBX: 0000000000000001 RCX: ffffffff8b60c2a9 [ 294.518284][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c014 RDI: ffffffff8bf073c0 [ 294.518296][ C1] RBP: ffffed1003adc490 R08: 0000000000000001 R09: ffffed10170a6655 [ 294.518308][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 294.518323][ C1] R13: ffff88801d6e2480 R14: ffffffff908214d0 R15: 0000000000000000 [ 294.518335][ C1] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 294.518352][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.518364][ C1] CR2: 00007f0054a1df7a CR3: 0000000024c8f000 CR4: 00000000003526f0 [ 294.518377][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 294.518387][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 294.518398][ C1] Call Trace: [ 294.518405][ C1] [ 294.518412][ C1] default_idle+0x13/0x20 [ 294.518433][ C1] default_idle_call+0x6c/0xb0 [ 294.518453][ C1] do_idle+0x38d/0x500 [ 294.518477][ C1] ? __pfx_do_idle+0x10/0x10 [ 294.518499][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 294.518522][ C1] cpu_startup_entry+0x4f/0x60 [ 294.518545][ C1] start_secondary+0x21d/0x2b0 [ 294.518570][ C1] ? __pfx_start_secondary+0x10/0x10 [ 294.518598][ C1] common_startup_64+0x13e/0x148 [ 294.518625][ C1] [ 294.707432][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.751893][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.714310][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.751967][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.792215][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.800338][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.833276][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.871922][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.834007][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.912140][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.992189][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog