last executing test programs: 4.189578958s ago: executing program 2 (id=814): bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.095904317s ago: executing program 2 (id=817): socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x44400, 0x44) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) dup3(r3, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 4.017071061s ago: executing program 2 (id=820): r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x7]}, 0x8) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000cab000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x24, &(0x7f0000000000)={0x17, 0xb, 0x85}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, 0x0, 0x0, 0x5}]) io_pgetevents(0x0, 0x7, 0x7, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 3.32462529s ago: executing program 0 (id=824): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000001000370429bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c040000000000180012800e000100776972656775617264"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 3.19532474s ago: executing program 0 (id=827): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xf) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.078427483s ago: executing program 2 (id=830): socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x44400, 0x44) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) dup3(r3, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 3.024019288s ago: executing program 1 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x4000040) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 3.016362805s ago: executing program 2 (id=832): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20) syz_open_procfs(0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 2.944041496s ago: executing program 1 (id=833): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x1, 0x2, 0x4, "c1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "af45cee1"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000280)=""/137) 2.888123827s ago: executing program 0 (id=834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff4}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.839171487s ago: executing program 0 (id=835): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x500000000000000) 2.815607957s ago: executing program 2 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) add_key$user(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x3}, &(0x7f0000000e40)="1b", 0x1, 0xfffffffffffffffc) 2.251882536s ago: executing program 3 (id=839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) 2.151004745s ago: executing program 3 (id=840): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.027750002s ago: executing program 4 (id=842): socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x44400, 0x44) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) dup3(r3, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 2.027138672s ago: executing program 4 (id=843): r0 = io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) 1.947918051s ago: executing program 4 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 1.947750153s ago: executing program 0 (id=845): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.943813907s ago: executing program 4 (id=846): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x5) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.813057413s ago: executing program 4 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffe0adf250000", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1.670812255s ago: executing program 0 (id=848): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc9, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\"\a\x00'], 0x0}, 0x0) 1.628540524s ago: executing program 4 (id=849): sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0xac, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', r5, 0x40, 0x700, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @empty, @empty}}}}) 1.29703649s ago: executing program 3 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x3c, r2, 0x5, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 1.220151416s ago: executing program 3 (id=851): lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001114010000000000000000000800"], 0x30}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 933.345051ms ago: executing program 1 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa100a, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 455.009239ms ago: executing program 3 (id=853): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) prlimit64(r0, 0x9, 0x0, 0x0) 396.051844ms ago: executing program 1 (id=854): r0 = io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) 322.80816ms ago: executing program 1 (id=855): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 223.238133ms ago: executing program 1 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r3, 0x400, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 0s ago: executing program 3 (id=857): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) kernel console output (not intermixed with test programs): 249 > 4 [ 59.622964][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.638689][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.645828][ T5172] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.653341][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.661803][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.662055][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.677957][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.686235][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.693692][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.702269][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.113074][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 60.165394][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 60.185519][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 60.231105][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 60.297033][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 60.391352][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.399077][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.406704][ T5851] bridge_slave_0: entered allmulticast mode [ 60.413340][ T5851] bridge_slave_0: entered promiscuous mode [ 60.428360][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.435475][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.443156][ T5845] bridge_slave_0: entered allmulticast mode [ 60.450761][ T5845] bridge_slave_0: entered promiscuous mode [ 60.457764][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.464797][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.472018][ T5845] bridge_slave_1: entered allmulticast mode [ 60.479815][ T5845] bridge_slave_1: entered promiscuous mode [ 60.506256][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.513376][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.521035][ T5851] bridge_slave_1: entered allmulticast mode [ 60.527795][ T5851] bridge_slave_1: entered promiscuous mode [ 60.534383][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.541634][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.548859][ T5852] bridge_slave_0: entered allmulticast mode [ 60.555498][ T5852] bridge_slave_0: entered promiscuous mode [ 60.573237][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.580534][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.587802][ T5854] bridge_slave_0: entered allmulticast mode [ 60.594422][ T5854] bridge_slave_0: entered promiscuous mode [ 60.609825][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.616986][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.624082][ T5852] bridge_slave_1: entered allmulticast mode [ 60.631504][ T5852] bridge_slave_1: entered promiscuous mode [ 60.650480][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.657651][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.664734][ T5854] bridge_slave_1: entered allmulticast mode [ 60.672096][ T5854] bridge_slave_1: entered promiscuous mode [ 60.697328][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.710024][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.744556][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.769724][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.777496][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.784608][ T5844] bridge_slave_0: entered allmulticast mode [ 60.791533][ T5844] bridge_slave_0: entered promiscuous mode [ 60.807178][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.819479][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.837705][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.844801][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.852200][ T5844] bridge_slave_1: entered allmulticast mode [ 60.859127][ T5844] bridge_slave_1: entered promiscuous mode [ 60.868680][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.887926][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.897984][ T5845] team0: Port device team_slave_0 added [ 60.913257][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.939887][ T5845] team0: Port device team_slave_1 added [ 60.979581][ T5851] team0: Port device team_slave_0 added [ 60.996139][ T5852] team0: Port device team_slave_0 added [ 61.011423][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.022629][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.032843][ T5854] team0: Port device team_slave_0 added [ 61.039967][ T5851] team0: Port device team_slave_1 added [ 61.055617][ T5852] team0: Port device team_slave_1 added [ 61.062130][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.069311][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.095294][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.122464][ T5854] team0: Port device team_slave_1 added [ 61.143426][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.150441][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.176859][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.208710][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.216103][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.242276][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.263380][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.270593][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.296539][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.308970][ T5844] team0: Port device team_slave_0 added [ 61.322671][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.329859][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.357147][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.374303][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.381305][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.408603][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.420378][ T5844] team0: Port device team_slave_1 added [ 61.426634][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.433562][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.460073][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.491201][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.498343][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.524547][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.565623][ T5851] hsr_slave_0: entered promiscuous mode [ 61.572008][ T5851] hsr_slave_1: entered promiscuous mode [ 61.594411][ T5845] hsr_slave_0: entered promiscuous mode [ 61.600631][ T5845] hsr_slave_1: entered promiscuous mode [ 61.607361][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 61.613128][ T5845] Cannot create hsr debugfs directory [ 61.620958][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.628411][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.654344][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.666669][ T51] Bluetooth: hci0: command tx timeout [ 61.666672][ T5853] Bluetooth: hci1: command tx timeout [ 61.689009][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.696086][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.722212][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.746028][ T5853] Bluetooth: hci4: command tx timeout [ 61.746238][ T5858] Bluetooth: hci2: command tx timeout [ 61.757250][ T51] Bluetooth: hci3: command tx timeout [ 61.794625][ T5852] hsr_slave_0: entered promiscuous mode [ 61.802547][ T5852] hsr_slave_1: entered promiscuous mode [ 61.808581][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 61.814289][ T5852] Cannot create hsr debugfs directory [ 61.842203][ T5854] hsr_slave_0: entered promiscuous mode [ 61.848807][ T5854] hsr_slave_1: entered promiscuous mode [ 61.854758][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 61.860585][ T5854] Cannot create hsr debugfs directory [ 61.882413][ T5844] hsr_slave_0: entered promiscuous mode [ 61.888612][ T5844] hsr_slave_1: entered promiscuous mode [ 61.894604][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 61.900369][ T5844] Cannot create hsr debugfs directory [ 62.234902][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.247484][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.260123][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.274856][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.322456][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.332745][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.345310][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.359207][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.424347][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.439495][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.450461][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.461645][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.518012][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.529433][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.539278][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.550844][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.629085][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.686544][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.700265][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.710701][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.722985][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.734180][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.759576][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.766730][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.802728][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.809846][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.830416][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.860956][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.905628][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.924714][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.940429][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.947593][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.963913][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.971040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.994374][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.008020][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.015106][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.026580][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.033634][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.065345][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.122150][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.148352][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 63.148367][ T30] audit: type=1400 audit(1757463753.811:86): avc: denied { sys_module } for pid=5845 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.185308][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.207726][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.223114][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.249408][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.256548][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.287275][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.294402][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.320950][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.328090][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.387723][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.395279][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.464297][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.514279][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.594351][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.622957][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.644856][ T5845] veth0_vlan: entered promiscuous mode [ 63.687030][ T5845] veth1_vlan: entered promiscuous mode [ 63.745440][ T5844] veth0_vlan: entered promiscuous mode [ 63.752271][ T51] Bluetooth: hci0: command tx timeout [ 63.765782][ T51] Bluetooth: hci1: command tx timeout [ 63.810262][ T5844] veth1_vlan: entered promiscuous mode [ 63.825867][ T5858] Bluetooth: hci3: command tx timeout [ 63.835511][ T5858] Bluetooth: hci2: command tx timeout [ 63.841622][ T51] Bluetooth: hci4: command tx timeout [ 63.880013][ T5845] veth0_macvtap: entered promiscuous mode [ 63.889589][ T5844] veth0_macvtap: entered promiscuous mode [ 63.911909][ T5845] veth1_macvtap: entered promiscuous mode [ 63.923281][ T5844] veth1_macvtap: entered promiscuous mode [ 63.934559][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.961188][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.989657][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.020626][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.039824][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.059650][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.085328][ T3003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.107608][ T3003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.117066][ T3003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.144994][ T3003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.154581][ T3003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.183493][ T3003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.199412][ T5854] veth0_vlan: entered promiscuous mode [ 64.218591][ T3003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.230499][ T3003] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.254555][ T5852] veth0_vlan: entered promiscuous mode [ 64.269140][ T5854] veth1_vlan: entered promiscuous mode [ 64.321554][ T5852] veth1_vlan: entered promiscuous mode [ 64.333539][ T5851] veth0_vlan: entered promiscuous mode [ 64.351597][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.360268][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.385244][ T5851] veth1_vlan: entered promiscuous mode [ 64.412739][ T5854] veth0_macvtap: entered promiscuous mode [ 64.419112][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.424300][ T5854] veth1_macvtap: entered promiscuous mode [ 64.442027][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.472436][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.474562][ T5852] veth0_macvtap: entered promiscuous mode [ 64.496912][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.500400][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.513736][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.514636][ T5852] veth1_macvtap: entered promiscuous mode [ 64.525278][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.538935][ T5851] veth0_macvtap: entered promiscuous mode [ 64.550416][ T30] audit: type=1400 audit(1757463755.211:87): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.9Ly349/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.555911][ T5851] veth1_macvtap: entered promiscuous mode [ 64.594156][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.601985][ T30] audit: type=1400 audit(1757463755.241:88): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.639010][ T30] audit: type=1400 audit(1757463755.251:89): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.9Ly349/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.643698][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.672175][ T30] audit: type=1400 audit(1757463755.251:90): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.697104][ T30] audit: type=1400 audit(1757463755.271:91): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.9Ly349/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.737417][ T30] audit: type=1400 audit(1757463755.271:92): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.9Ly349/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.769870][ T30] audit: type=1400 audit(1757463755.271:93): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.790743][ T30] audit: type=1400 audit(1757463755.291:94): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.820290][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.826060][ T30] audit: type=1400 audit(1757463755.291:95): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="gadgetfs" ino=8279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.855037][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.858733][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.879472][ T3003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.890942][ T3003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.905070][ T3003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.936252][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.961618][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.973998][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.046869][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.085139][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.098700][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.154475][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.200730][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.209762][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.221745][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.328849][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.340935][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.363706][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.380734][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'. [ 65.382056][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.509048][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.520874][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.569597][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.599299][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.668986][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.679719][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.683687][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.695987][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.825975][ T51] Bluetooth: hci1: command tx timeout [ 65.832666][ T5858] Bluetooth: hci0: command tx timeout [ 65.909682][ T51] Bluetooth: hci4: command tx timeout [ 65.915106][ T51] Bluetooth: hci2: command tx timeout [ 65.920681][ T5858] Bluetooth: hci3: command tx timeout [ 66.346255][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.515995][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 66.530148][ T9] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 66.565235][ T9] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.585929][ T5927] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.598200][ T9] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.616007][ T9] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 66.662128][ T9] usb 5-1: config 7 interface 0 has no altsetting 0 [ 66.718747][ T6014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.728893][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 66.738827][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.760417][ T6000] infiniband syz1: set active [ 66.765244][ T6000] infiniband syz1: added syz_tun [ 66.803846][ T6018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.719381][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 68.185783][ T51] Bluetooth: hci1: command tx timeout [ 68.191265][ T5858] Bluetooth: hci0: command tx timeout [ 68.196801][ T5858] Bluetooth: hci2: command tx timeout [ 68.202247][ T51] Bluetooth: hci3: command tx timeout [ 68.208115][ T5858] Bluetooth: hci4: command tx timeout [ 68.234775][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 68.262553][ T5927] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 68.278639][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.317189][ T5927] usb 4-1: config 0 descriptor?? [ 68.383324][ T6000] RDS/IB: syz1: added [ 68.389695][ T6000] smc: adding ib device syz1 with port count 1 [ 68.408096][ T6000] smc: ib device syz1 port 1 has pnetid [ 68.506195][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0001/input/input5 [ 68.541458][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 68.541490][ T30] audit: type=1400 audit(1757463759.201:144): avc: denied { read } for pid=5206 comm="acpid" name="mouse1" dev="devtmpfs" ino=2794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.632997][ T30] audit: type=1400 audit(1757463759.201:145): avc: denied { open } for pid=5206 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.670069][ T30] audit: type=1400 audit(1757463759.241:146): avc: denied { read write } for pid=5999 comm="syz.3.15" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 68.706269][ T9] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 68.729999][ T30] audit: type=1400 audit(1757463759.241:147): avc: denied { open } for pid=5999 comm="syz.3.15" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 68.877271][ T30] audit: type=1400 audit(1757463759.261:148): avc: denied { ioctl } for pid=5206 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2794 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.546871][ C1] kye 0003:0458:5010.0001: usb_submit_urb(ctrl) failed: -1 [ 70.206110][ T30] audit: type=1400 audit(1757463760.851:149): avc: denied { read } for pid=6034 comm="syz.2.24" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.235853][ T30] audit: type=1400 audit(1757463760.851:150): avc: denied { open } for pid=6034 comm="syz.2.24" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.258783][ T30] audit: type=1400 audit(1757463760.861:151): avc: denied { map_create } for pid=6038 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.300743][ T30] audit: type=1400 audit(1757463760.861:152): avc: denied { map_read map_write } for pid=6038 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.383816][ T5955] usb 5-1: USB disconnect, device number 2 [ 70.432184][ T30] audit: type=1400 audit(1757463760.861:153): avc: denied { ioctl } for pid=6034 comm="syz.2.24" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.957796][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.964207][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.255545][ T6047] rdma_rxe: rxe_newlink: failed to add syz_tun [ 71.289503][ T5927] usbhid 4-1:0.0: can't add hid device: -71 [ 71.308657][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 71.392715][ T5927] usb 4-1: USB disconnect, device number 2 [ 72.335841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.449397][ T6088] syz1: rxe_newlink: already configured on syz_tun [ 72.668188][ T6093] netlink: 'syz.4.45': attribute type 10 has an invalid length. [ 72.784961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.835909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.884982][ T6090] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 72.909274][ T6093] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 72.927786][ T6093] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.945726][ T5901] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.992075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.066766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.104812][ T6097] cgroup: Name too long [ 73.475770][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 73.492253][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.515891][ T5901] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 73.536209][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.605018][ T5901] usb 4-1: config 0 descriptor?? [ 73.844972][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 73.851515][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 73.862294][ T5901] usb 4-1: USB disconnect, device number 3 [ 73.948396][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 73.948412][ T30] audit: type=1400 audit(1757463764.611:162): avc: denied { create } for pid=6108 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.983436][ T30] audit: type=1400 audit(1757463764.641:163): avc: denied { create } for pid=6108 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.027165][ T30] audit: type=1400 audit(1757463764.641:164): avc: denied { write } for pid=6108 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.113944][ T30] audit: type=1400 audit(1757463764.671:165): avc: denied { create } for pid=6101 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.999777][ T6010] Set syz1 is full, maxelem 65536 reached [ 75.282198][ T30] audit: type=1400 audit(1757463765.941:166): avc: denied { bind } for pid=6123 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.302808][ T6124] Bluetooth: MGMT ver 1.23 [ 75.322199][ T6107] syz.4.50 (6107): drop_caches: 2 [ 75.374490][ T30] audit: type=1400 audit(1757463765.961:167): avc: denied { write } for pid=6123 comm="syz.1.59" path="socket:[9287]" dev="sockfs" ino=9287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.365276][ T30] audit: type=1326 audit(1757463771.021:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 80.429527][ T30] audit: type=1326 audit(1757463771.021:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 80.535855][ T30] audit: type=1326 audit(1757463771.051:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 80.623839][ T30] audit: type=1326 audit(1757463771.051:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 80.717266][ T30] audit: type=1326 audit(1757463771.051:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 80.758304][ T5927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.885365][ T30] audit: type=1326 audit(1757463771.051:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 81.014735][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.078895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 81.082538][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.136055][ T30] audit: type=1326 audit(1757463771.051:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 81.169352][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.194309][ T840] cfg80211: failed to load regulatory.db [ 81.212409][ T30] audit: type=1326 audit(1757463771.051:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 81.221527][ T5927] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.306707][ T6165] rdma_rxe: rxe_newlink: failed to add syz_tun [ 81.352005][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.706638][ T30] audit: type=1326 audit(1757463771.051:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 81.755738][ T5927] usb 4-1: config 0 descriptor?? [ 81.767726][ T30] audit: type=1326 audit(1757463771.051:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 82.189733][ T5927] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 82.240244][ T5927] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 82.607447][ T5908] usb 4-1: USB disconnect, device number 4 [ 82.870190][ T5853] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 82.884574][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 82.884602][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.884615][ T5853] Workqueue: hci2 hci_rx_work [ 82.884641][ T5853] Call Trace: [ 82.884648][ T5853] [ 82.884655][ T5853] dump_stack_lvl+0x16c/0x1f0 [ 82.884681][ T5853] sysfs_warn_dup+0x7f/0xa0 [ 82.884706][ T5853] sysfs_create_dir_ns+0x24b/0x2b0 [ 82.884729][ T5853] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 82.884756][ T5853] ? preempt_schedule_thunk+0x16/0x30 [ 82.884788][ T5853] kobject_add_internal+0x2c4/0x9b0 [ 82.884819][ T5853] kobject_add+0x16e/0x240 [ 82.884846][ T5853] ? __pfx_kobject_add+0x10/0x10 [ 82.884876][ T5853] ? kobject_put+0xab/0x5a0 [ 82.884909][ T5853] device_add+0x288/0x1aa0 [ 82.884937][ T5853] ? __pfx_dev_set_name+0x10/0x10 [ 82.884954][ T5853] ? __pfx_device_add+0x10/0x10 [ 82.884980][ T5853] ? mgmt_send_event_skb+0x2fb/0x460 [ 82.885007][ T5853] hci_conn_add_sysfs+0x17e/0x230 [ 82.885030][ T5853] le_conn_complete_evt+0x1075/0x1d70 [ 82.885048][ T5853] ? preempt_count_sub+0xb0/0x160 [ 82.885076][ T5853] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 82.885095][ T5853] ? irqentry_exit+0x3b/0x90 [ 82.885120][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.885148][ T5853] hci_le_conn_complete_evt+0x23c/0x370 [ 82.885173][ T5853] hci_le_meta_evt+0x354/0x5e0 [ 82.885193][ T5853] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 82.885215][ T5853] hci_event_packet+0x682/0x11c0 [ 82.885240][ T5853] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 82.885262][ T5853] ? __pfx_hci_event_packet+0x10/0x10 [ 82.885285][ T5853] ? kcov_remote_start+0x3d9/0x6d0 [ 82.885311][ T5853] hci_rx_work+0x2c5/0x16b0 [ 82.885338][ T5853] process_one_work+0x9cc/0x1b70 [ 82.885368][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 82.885397][ T5853] ? assign_work+0x1a0/0x250 [ 82.885418][ T5853] worker_thread+0x6c8/0xf10 [ 82.885451][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 82.885470][ T5853] kthread+0x3c2/0x780 [ 82.885488][ T5853] ? __pfx_kthread+0x10/0x10 [ 82.885507][ T5853] ? rcu_is_watching+0x12/0xc0 [ 82.885530][ T5853] ? __pfx_kthread+0x10/0x10 [ 82.885548][ T5853] ret_from_fork+0x5d4/0x6f0 [ 82.885565][ T5853] ? __pfx_kthread+0x10/0x10 [ 82.885583][ T5853] ret_from_fork_asm+0x1a/0x30 [ 82.885617][ T5853] [ 83.119592][ T5853] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 83.134207][ T5853] Bluetooth: hci2: failed to register connection device [ 83.592552][ T6200] tipc: Started in network mode [ 83.623561][ T6200] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 83.631481][ T6200] tipc: Enabled bearer , priority 0 [ 84.214395][ T6236] netlink: 'syz.3.96': attribute type 10 has an invalid length. [ 84.225437][ T6233] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 84.259693][ T6236] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 84.271284][ T6236] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.757126][ T5927] tipc: Node number set to 11578026 [ 84.985581][ T6270] rdma_rxe: rxe_newlink: failed to add syz_tun [ 85.023257][ T6272] 9pnet_fd: Insufficient options for proto=fd [ 85.559205][ T6290] kvm: pic: non byte write [ 85.753330][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 85.753345][ T30] audit: type=1800 audit(1757463776.411:205): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.110" name="/" dev="fuse" ino=1 res=0 errno=0 [ 86.049977][ T6310] lo speed is unknown, defaulting to 1000 [ 86.065296][ T6310] lo speed is unknown, defaulting to 1000 [ 86.071696][ T5955] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.083398][ T6310] lo speed is unknown, defaulting to 1000 [ 86.237168][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.276774][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.281979][ T6321] rdma_rxe: rxe_newlink: failed to add syz_tun [ 86.311323][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.363264][ T5955] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.382517][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.426908][ T5955] usb 4-1: config 0 descriptor?? [ 86.671497][ T6310] infiniband sz1: set active [ 86.679154][ T5956] lo speed is unknown, defaulting to 1000 [ 86.685233][ T6310] infiniband sz1: added lo [ 86.734487][ T6310] RDS/IB: sz1: added [ 86.741029][ T6310] smc: adding ib device sz1 with port count 1 [ 86.747286][ T6310] smc: ib device sz1 port 1 has pnetid [ 86.753370][ T5956] lo speed is unknown, defaulting to 1000 [ 86.763329][ T6310] lo speed is unknown, defaulting to 1000 [ 86.878820][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 86.885212][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 86.922553][ T5955] usb 4-1: USB disconnect, device number 5 [ 87.058728][ T30] audit: type=1804 audit(1757463777.721:206): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.135" name="/newroot/21/file1" dev="fuse" ino=1 res=1 errno=0 [ 87.322721][ T6310] lo speed is unknown, defaulting to 1000 [ 87.555342][ T6356] 9pnet_fd: Insufficient options for proto=fd [ 87.605113][ T6358] Invalid ELF header magic: != ELF [ 87.615172][ T30] audit: type=1400 audit(1757463778.261:207): avc: denied { sys_module } for pid=6357 comm="syz.4.143" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.689651][ T30] audit: type=1400 audit(1757463778.261:208): avc: denied { module_load } for pid=6357 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 87.809784][ T30] audit: type=1800 audit(1757463778.431:209): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.135" name="/" dev="fuse" ino=1 res=0 errno=0 [ 87.859104][ T6362] syz1: rxe_newlink: already configured on syz_tun [ 87.979837][ T6310] lo speed is unknown, defaulting to 1000 [ 88.296775][ T30] audit: type=1400 audit(1757463778.961:210): avc: denied { ioctl } for pid=6371 comm="syz.0.149" path="socket:[11133]" dev="sockfs" ino=11133 ioctlcmd=0x61d9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 88.446754][ T6380] fuse: Unknown parameter '0x0000000000000003' [ 88.637380][ T6310] lo speed is unknown, defaulting to 1000 [ 89.613883][ T6360] lo speed is unknown, defaulting to 1000 [ 89.792587][ T6397] Zero length message leads to an empty skb [ 89.836692][ T30] audit: type=1804 audit(1757463780.481:211): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.157" name="/newroot/30/file1" dev="fuse" ino=1 res=1 errno=0 [ 90.221961][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 90.260759][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 90.287632][ T6374] lo speed is unknown, defaulting to 1000 [ 90.365886][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 90.408828][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 90.430852][ T1158] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.460409][ T1158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.505307][ T1158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.535053][ T1158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.606988][ T6405] syz.3.159 (6405): drop_caches: 2 [ 90.614688][ T6407] fuse: Unknown parameter '0x0000000000000003' [ 90.703677][ T6310] lo speed is unknown, defaulting to 1000 [ 90.934870][ T6409] rdma_rxe: rxe_newlink: failed to add syz_tun [ 91.056209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.064710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.073232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.166063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.166741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.922981][ T30] audit: type=1400 audit(1757463782.581:212): avc: denied { write } for pid=6425 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.993836][ T6425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.392457][ T30] audit: type=1804 audit(1757463783.051:213): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.171" name="/newroot/42/file1" dev="fuse" ino=1 res=1 errno=0 [ 92.636360][ T6438] fuse: Unknown parameter '0x0000000000000003' [ 93.032965][ T30] audit: type=1400 audit(1757463783.691:214): avc: denied { bind } for pid=6454 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.290508][ T6458] binfmt_misc: register: failed to install interpreter file ./file0 [ 93.503044][ T30] audit: type=1804 audit(1757463784.161:215): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.183" name="/newroot/29/file1" dev="fuse" ino=1 res=1 errno=0 [ 93.539568][ T6461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.720120][ T6464] lo speed is unknown, defaulting to 1000 [ 93.977253][ T6479] fuse: Unknown parameter '0x0000000000000003' [ 94.236264][ T6468] syz.2.185 (6468): drop_caches: 2 [ 94.630774][ T5858] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 94.640619][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 94.640645][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.640658][ T5858] Workqueue: hci3 hci_rx_work [ 94.640684][ T5858] Call Trace: [ 94.640691][ T5858] [ 94.640699][ T5858] dump_stack_lvl+0x16c/0x1f0 [ 94.640726][ T5858] sysfs_warn_dup+0x7f/0xa0 [ 94.640751][ T5858] sysfs_create_dir_ns+0x24b/0x2b0 [ 94.640776][ T5858] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 94.640810][ T5858] kobject_add_internal+0x2c4/0x9b0 [ 94.640840][ T5858] kobject_add+0x16e/0x240 [ 94.640864][ T5858] ? __pfx_kobject_add+0x10/0x10 [ 94.640894][ T5858] ? kobject_put+0xab/0x5a0 [ 94.640925][ T5858] device_add+0x288/0x1aa0 [ 94.640953][ T5858] ? __pfx_dev_set_name+0x10/0x10 [ 94.640970][ T5858] ? __pfx_device_add+0x10/0x10 [ 94.640996][ T5858] ? mgmt_send_event_skb+0x2fb/0x460 [ 94.641023][ T5858] hci_conn_add_sysfs+0x17e/0x230 [ 94.641045][ T5858] le_conn_complete_evt+0x1075/0x1d70 [ 94.641063][ T5858] ? preempt_count_sub+0xb0/0x160 [ 94.641091][ T5858] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 94.641114][ T5858] ? irqentry_exit+0x3b/0x90 [ 94.641135][ T5858] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.641160][ T5858] hci_le_conn_complete_evt+0x23c/0x370 [ 94.641185][ T5858] hci_le_meta_evt+0x354/0x5e0 [ 94.641205][ T5858] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 94.641227][ T5858] hci_event_packet+0x682/0x11c0 [ 94.641246][ T5858] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 94.641267][ T5858] ? __pfx_hci_event_packet+0x10/0x10 [ 94.641297][ T5858] ? kcov_remote_start+0x3d9/0x6d0 [ 94.641323][ T5858] hci_rx_work+0x2c5/0x16b0 [ 94.641350][ T5858] process_one_work+0x9cc/0x1b70 [ 94.641381][ T5858] ? __pfx_process_one_work+0x10/0x10 [ 94.641411][ T5858] ? assign_work+0x1a0/0x250 [ 94.641432][ T5858] worker_thread+0x6c8/0xf10 [ 94.641465][ T5858] ? __kthread_parkme+0x19e/0x250 [ 94.641493][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 94.641513][ T5858] kthread+0x3c2/0x780 [ 94.641531][ T5858] ? __pfx_kthread+0x10/0x10 [ 94.641551][ T5858] ? rcu_is_watching+0x12/0xc0 [ 94.641574][ T5858] ? __pfx_kthread+0x10/0x10 [ 94.641593][ T5858] ret_from_fork+0x5d4/0x6f0 [ 94.641609][ T5858] ? __pfx_kthread+0x10/0x10 [ 94.641627][ T5858] ret_from_fork_asm+0x1a/0x30 [ 94.641662][ T5858] [ 94.875894][ T5858] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.889986][ T5858] Bluetooth: hci3: failed to register connection device [ 95.268717][ T6508] 9pnet_fd: Insufficient options for proto=fd [ 95.405805][ T30] audit: type=1400 audit(1757463786.051:216): avc: denied { map } for pid=6509 comm="syz.1.199" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.480629][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.501021][ T30] audit: type=1400 audit(1757463786.051:217): avc: denied { read write } for pid=6509 comm="syz.1.199" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.785957][ T6484] lo speed is unknown, defaulting to 1000 [ 96.229618][ T6536] fuse: Unknown parameter 'fd0x0000000000000003' [ 96.269472][ T6520] rdma_rxe: rxe_newlink: failed to add lo [ 96.554041][ T6539] syz.3.214 (6539): drop_caches: 2 [ 96.622235][ T6548] rdma_rxe: rxe_newlink: failed to add syz_tun [ 96.847893][ T6555] rdma_rxe: rxe_newlink: failed to add syz_tun [ 97.124897][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.295832][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 97.321908][ T6566] fuse: Unknown parameter 'fd0x0000000000000003' [ 97.351891][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.430861][ T5901] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 97.455602][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.498479][ T5901] usb 3-1: config 0 descriptor?? [ 97.573999][ T6571] 9pnet_fd: Insufficient options for proto=fd [ 97.585268][ T6570] syz.1.218 (6570): drop_caches: 2 [ 97.895892][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 97.923230][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.975988][ T5901] usb 3-1: USB disconnect, device number 2 [ 98.009045][ T30] audit: type=1400 audit(1757463788.661:218): avc: denied { create } for pid=6582 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.043412][ T6587] 9pnet_fd: Insufficient options for proto=fd [ 98.422729][ T6576] lo speed is unknown, defaulting to 1000 [ 98.490589][ T6597] fuse: Unknown parameter 'fd0x0000000000000003' [ 98.685999][ T6606] 9pnet_fd: Insufficient options for proto=fd [ 98.856932][ T30] audit: type=1400 audit(1757463789.511:219): avc: denied { search } for pid=5516 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.905221][ T30] audit: type=1400 audit(1757463789.511:220): avc: denied { search } for pid=5516 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.946562][ T30] audit: type=1400 audit(1757463789.511:221): avc: denied { search } for pid=5516 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.045694][ T30] audit: type=1400 audit(1757463789.511:222): avc: denied { read } for pid=5516 comm="dhcpcd" name="n100" dev="tmpfs" ino=2868 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.141606][ T30] audit: type=1400 audit(1757463789.511:223): avc: denied { open } for pid=5516 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2868 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.165938][ T6622] rdma_rxe: rxe_newlink: failed to add syz_tun [ 99.280424][ T30] audit: type=1400 audit(1757463789.511:224): avc: denied { getattr } for pid=5516 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2868 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.308284][ T30] audit: type=1400 audit(1757463789.841:225): avc: denied { read open } for pid=6624 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.334002][ T30] audit: type=1400 audit(1757463789.841:226): avc: denied { getattr } for pid=6624 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.388930][ T6632] rdma_rxe: rxe_newlink: failed to add syz_tun [ 99.478302][ T6638] 9pnet_fd: Insufficient options for proto=fd [ 99.771266][ T6657] rdma_rxe: rxe_newlink: failed to add syz_tun [ 99.968125][ T30] audit: type=1400 audit(1757463790.631:227): avc: denied { add_name } for pid=6619 comm="dhcpcd-run-hook" name="resolv.conf.ipvlan1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.097480][ T6672] rdma_rxe: rxe_newlink: failed to add syz_tun [ 100.127246][ T6671] syz_tun: entered allmulticast mode [ 100.224376][ T6671] dvmrp8: entered allmulticast mode [ 100.285378][ T6679] rdma_rxe: rxe_newlink: failed to add syz_tun [ 100.380646][ T6667] syz_tun: left allmulticast mode [ 100.420091][ T6683] 9pnet_fd: Insufficient options for proto=fd [ 101.401793][ T6670] lo speed is unknown, defaulting to 1000 [ 101.423149][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 101.508712][ T6707] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 101.518540][ T6715] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.539742][ T6715] block device autoloading is deprecated and will be removed. [ 101.796576][ T5901] lo speed is unknown, defaulting to 1000 [ 102.024904][ T6710] lo speed is unknown, defaulting to 1000 [ 102.239121][ T6739] 9pnet_fd: Insufficient options for proto=fd [ 102.407589][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 102.448566][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 102.528397][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 102.538237][ T2984] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.556318][ T2984] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.565489][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 102.611008][ T2896] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.641891][ T2896] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.662463][ T6721] rdma_rxe: rxe_newlink: failed to add syz_tun [ 102.720791][ T6755] syz_tun: entered allmulticast mode [ 102.825326][ T6755] dvmrp8: entered allmulticast mode [ 102.863636][ T6754] syz_tun: left allmulticast mode [ 104.036583][ T6771] lo speed is unknown, defaulting to 1000 [ 104.237891][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 104.237996][ T30] audit: type=1400 audit(1757463794.901:237): avc: denied { create } for pid=6787 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.545369][ T6791] hub 9-0:1.0: USB hub found [ 104.553052][ T6791] hub 9-0:1.0: 1 port detected [ 104.959546][ T6782] lo speed is unknown, defaulting to 1000 [ 105.028109][ T6802] syz_tun: entered allmulticast mode [ 105.044248][ T6802] dvmrp8: entered allmulticast mode [ 105.054808][ T6801] syz_tun: left allmulticast mode [ 105.272209][ T6810] warning: `syz.3.305' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.308311][ T6810] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 105.719141][ T6826] syz.3.311 (6826): drop_caches: 2 [ 106.024942][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 106.074314][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 106.086294][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 106.095069][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 106.157927][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 106.203436][ T6838] tipc: Started in network mode [ 106.208705][ T6838] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 106.225922][ T6838] tipc: Enabled bearer , priority 0 [ 106.776894][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.345954][ T5956] tipc: Node number set to 11578026 [ 107.353197][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.383292][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.405818][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.443652][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.478507][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.502759][ T9] usb 3-1: config 0 descriptor?? [ 108.294587][ T6876] __nla_validate_parse: 3 callbacks suppressed [ 108.294604][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.351861][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.352031][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.379088][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.391786][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.450143][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.469507][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.495763][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 108.501758][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 108.511919][ T9] usb 3-1: USB disconnect, device number 3 [ 108.527779][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.938573][ T5956] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.024369][ T5858] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 109.336418][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 109.352960][ T5956] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.362325][ T5956] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 109.377062][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.388846][ T5956] usb 2-1: config 0 descriptor?? [ 109.625858][ T5956] usbhid 2-1:0.0: can't add hid device: -71 [ 109.631868][ T5956] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.650267][ T5956] usb 2-1: USB disconnect, device number 2 [ 109.692489][ T6913] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 109.728813][ T6913] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.809732][ T6919] fuse: Unknown parameter 'grou00000000000000000000' [ 109.820111][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 109.839397][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 110.086709][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.249631][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.260696][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.271509][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.284978][ T5927] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.294317][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.308862][ T5927] usb 4-1: config 0 descriptor?? [ 110.753252][ T1158] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.771797][ T1158] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.795607][ T1158] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.846511][ T1158] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.063038][ T5927] usbhid 4-1:0.0: can't add hid device: -71 [ 111.069417][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.082818][ T5927] usb 4-1: USB disconnect, device number 6 [ 111.540783][ T5853] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 111.606712][ T6951] netlink: 'syz.1.358': attribute type 10 has an invalid length. [ 111.637456][ T6951] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.685114][ T6968] 9pnet: Could not find request transport: fd0x0000000000000003 [ 112.897781][ T30] audit: type=1400 audit(1757463803.551:238): avc: denied { read } for pid=6979 comm="syz.3.368" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.953291][ T30] audit: type=1400 audit(1757463803.551:239): avc: denied { open } for pid=6979 comm="syz.3.368" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.978145][ T30] audit: type=1400 audit(1757463803.591:240): avc: denied { write } for pid=6979 comm="syz.3.368" name="radio0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.009611][ T6985] vivid-000: ================= START STATUS ================= [ 113.018684][ T30] audit: type=1400 audit(1757463803.591:241): avc: denied { ioctl } for pid=6979 comm="syz.3.368" path="/dev/radio0" dev="devtmpfs" ino=955 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.030366][ T6985] vivid-000: Test Pattern: 75% Colorbar [ 113.080932][ T6985] vivid-000: Fill Percentage of Frame: 100 [ 113.102563][ T6985] vivid-000: Horizontal Movement: No Movement [ 113.131619][ T6985] vivid-000: Vertical Movement: No Movement [ 113.139334][ T6985] vivid-000: OSD Text Mode: All [ 113.144984][ T6985] vivid-000: Show Border: false [ 113.154886][ T6985] vivid-000: Show Square: false [ 113.166807][ T6985] vivid-000: Sensor Flipped Horizontally: false [ 113.173195][ T6985] vivid-000: Sensor Flipped Vertically: false [ 113.182730][ T6985] vivid-000: Insert SAV Code in Image: false [ 113.205690][ T6985] vivid-000: Insert EAV Code in Image: false [ 113.212088][ T6985] vivid-000: Insert Video Guard Band: false [ 113.220590][ T6985] vivid-000: Reduced Framerate: false [ 113.230684][ T6985] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 113.240708][ T6985] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 113.254722][ T6985] vivid-000: Enable Capture Cropping: true [ 113.263311][ T6985] vivid-000: Enable Capture Composing: true [ 113.270513][ T6985] vivid-000: Enable Capture Scaler: true [ 113.278162][ T6985] vivid-000: Timestamp Source: End of Frame [ 113.284194][ T6985] vivid-000: Colorspace: sRGB [ 113.292716][ T6985] vivid-000: Transfer Function: Default [ 113.300958][ T6985] vivid-000: Y'CbCr Encoding: Default [ 113.306482][ T6985] vivid-000: HSV Encoding: Hue 0-179 [ 113.311888][ T6985] vivid-000: Quantization: Default [ 113.317076][ T6985] vivid-000: Apply Alpha To Red Only: false [ 113.323073][ T6985] vivid-000: Standard Aspect Ratio: 4x3 [ 113.328779][ T6985] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 113.336906][ T6985] vivid-000: DV Timings: 640x480p59 inactive [ 113.342909][ T6985] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 113.350606][ T6985] vivid-000: Maximum EDID Blocks: 2 [ 113.356613][ T6985] vivid-000: Limited RGB Range (16-235): false [ 113.363140][ T6985] vivid-000: Rx RGB Quantization Range: Automatic [ 113.369727][ T6985] vivid-000: Power Present: 0x00000001 [ 113.386295][ T6985] tpg source WxH: 320x240 (Y'CbCr) [ 113.391489][ T6985] tpg field: 1 [ 113.400251][ T6985] tpg crop: (0,0)/320x240 [ 113.408651][ T6985] tpg compose: (0,0)/320x240 [ 113.419592][ T6985] tpg colorspace: 8 [ 113.429230][ T6985] tpg transfer function: 0/0 [ 113.440035][ T6985] tpg Y'CbCr encoding: 0/0 [ 113.448316][ T6985] tpg quantization: 0/0 [ 113.457953][ T6985] tpg RGB range: 0/2 [ 113.465161][ T6985] vivid-000: ================== END STATUS ================== [ 113.725740][ T30] audit: type=1400 audit(1757463804.381:242): avc: denied { connect } for pid=7003 comm="syz.2.372" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.767036][ T30] audit: type=1400 audit(1757463804.411:243): avc: denied { write } for pid=7003 comm="syz.2.372" laddr=fe80::43 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.861131][ T5858] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 114.516156][ T5901] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.718012][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.729331][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.740033][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.753120][ T5901] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.762198][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.774698][ T5901] usb 5-1: config 0 descriptor?? [ 114.834081][ T6983] tipc: Started in network mode [ 114.839222][ T6983] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 114.846855][ T6983] tipc: Enabled bearer , priority 0 [ 114.866995][ T7016] syz_tun: entered allmulticast mode [ 114.885467][ T7012] syz_tun: left allmulticast mode [ 115.031712][ T7032] __nla_validate_parse: 7 callbacks suppressed [ 115.031739][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 115.085891][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 115.146449][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 115.196503][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 115.240998][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 115.363738][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 115.703527][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 115.714029][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 115.723995][ T5901] usb 5-1: USB disconnect, device number 3 [ 115.744132][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 115.778088][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 115.809269][ T7049] vivid-000: ================= START STATUS ================= [ 115.817427][ T7049] vivid-000: Test Pattern: 75% Colorbar [ 115.829652][ T7049] vivid-000: Fill Percentage of Frame: 100 [ 115.835498][ T7049] vivid-000: Horizontal Movement: No Movement [ 115.869013][ T7049] vivid-000: Vertical Movement: No Movement [ 115.881013][ T7049] vivid-000: OSD Text Mode: All [ 115.906817][ T7049] vivid-000: Show Border: false [ 115.922171][ T7049] vivid-000: Show Square: false [ 115.942589][ T7049] vivid-000: Sensor Flipped Horizontally: false [ 115.966535][ T5927] tipc: Node number set to 11578026 [ 115.994243][ T7049] vivid-000: Sensor Flipped Vertically: false [ 116.013333][ T7049] vivid-000: Insert SAV Code in Image: false [ 116.026125][ T7049] vivid-000: Insert EAV Code in Image: false [ 116.032575][ T7049] vivid-000: Insert Video Guard Band: false [ 116.054505][ T7049] vivid-000: Reduced Framerate: false [ 116.091856][ T7049] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 116.225668][ T7049] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 116.233738][ T7049] vivid-000: Enable Capture Cropping: true [ 116.486840][ T5853] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 116.496765][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 116.496792][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.496804][ T5853] Workqueue: hci1 hci_rx_work [ 116.496830][ T5853] Call Trace: [ 116.496836][ T5853] [ 116.496843][ T5853] dump_stack_lvl+0x16c/0x1f0 [ 116.496868][ T5853] sysfs_warn_dup+0x7f/0xa0 [ 116.496891][ T5853] sysfs_create_dir_ns+0x24b/0x2b0 [ 116.496915][ T5853] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 116.496937][ T5853] ? find_held_lock+0x2b/0x80 [ 116.496965][ T5853] ? do_raw_spin_unlock+0x172/0x230 [ 116.496987][ T5853] kobject_add_internal+0x2c4/0x9b0 [ 116.497017][ T5853] kobject_add+0x16e/0x240 [ 116.497042][ T5853] ? __pfx_kobject_add+0x10/0x10 [ 116.497070][ T5853] ? do_raw_spin_unlock+0x172/0x230 [ 116.497090][ T5853] ? kobject_put+0xab/0x5a0 [ 116.497122][ T5853] device_add+0x288/0x1aa0 [ 116.497150][ T5853] ? __pfx_dev_set_name+0x10/0x10 [ 116.497168][ T5853] ? __pfx_device_add+0x10/0x10 [ 116.497194][ T5853] ? mgmt_send_event_skb+0x2fb/0x460 [ 116.497220][ T5853] hci_conn_add_sysfs+0x17e/0x230 [ 116.497243][ T5853] le_conn_complete_evt+0x1075/0x1d70 [ 116.497262][ T5853] ? preempt_count_sub+0xb0/0x160 [ 116.497290][ T5853] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 116.497308][ T5853] ? hci_event_packet+0x459/0x11c0 [ 116.497334][ T5853] hci_le_conn_complete_evt+0x23c/0x370 [ 116.497359][ T5853] hci_le_meta_evt+0x354/0x5e0 [ 116.497384][ T5853] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 116.497406][ T5853] hci_event_packet+0x682/0x11c0 [ 116.497425][ T5853] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 116.497447][ T5853] ? __pfx_hci_event_packet+0x10/0x10 [ 116.497469][ T5853] ? kcov_remote_start+0x3c9/0x6d0 [ 116.497490][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.497520][ T5853] hci_rx_work+0x2c5/0x16b0 [ 116.497542][ T5853] ? rcu_is_watching+0x12/0xc0 [ 116.497583][ T5853] process_one_work+0x9cc/0x1b70 [ 116.497614][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 116.497642][ T5853] ? assign_work+0x1a0/0x250 [ 116.497664][ T5853] worker_thread+0x6c8/0xf10 [ 116.497703][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 116.497723][ T5853] kthread+0x3c2/0x780 [ 116.497742][ T5853] ? __pfx_kthread+0x10/0x10 [ 116.497762][ T5853] ? rcu_is_watching+0x12/0xc0 [ 116.497785][ T5853] ? __pfx_kthread+0x10/0x10 [ 116.497806][ T5853] ret_from_fork+0x5d4/0x6f0 [ 116.497823][ T5853] ? __pfx_kthread+0x10/0x10 [ 116.497842][ T5853] ret_from_fork_asm+0x1a/0x30 [ 116.497878][ T5853] [ 116.497902][ T5853] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 116.842103][ T5853] Bluetooth: hci1: failed to register connection device [ 116.859690][ T7049] vivid-000: Enable Capture Composing: true [ 116.986553][ T7049] vivid-000: Enable Capture Scaler: true [ 116.992234][ T7049] vivid-000: Timestamp Source: End of Frame [ 117.011096][ T7072] tipc: Started in network mode [ 117.043094][ T7072] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 117.075688][ T7049] vivid-000: Colorspace: sRGB [ 117.083273][ T7072] tipc: Enabled bearer , priority 0 [ 117.113542][ T7049] vivid-000: Transfer Function: Default [ 117.165719][ T7049] vivid-000: Y'CbCr Encoding: Default [ 117.171170][ T7049] vivid-000: HSV Encoding: Hue 0-179 [ 117.195375][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 117.195377][ T7049] vivid-000: Quantization: [ 117.211126][ T7049] Default [ 117.219210][ T7049] vivid-000: Apply Alpha To Red Only: false [ 117.225276][ T7049] vivid-000: Standard Aspect Ratio: 4x3 [ 117.236273][ T7049] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 117.268299][ T7049] vivid-000: DV Timings: 640x480p59 inactive [ 117.273956][ T7083] 9pnet_fd: Insufficient options for proto=fd [ 117.283065][ T7049] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 117.295368][ T7049] vivid-000: Maximum EDID Blocks: 2 [ 117.304378][ T7049] vivid-000: Limited RGB Range (16-235): false [ 117.317598][ T7049] vivid-000: Rx RGB Quantization Range: Automatic [ 117.332610][ T7049] vivid-000: Power Present: 0x00000001 [ 117.342306][ T7049] tpg source WxH: 320x240 (Y'CbCr) [ 117.354170][ T7049] tpg field: 1 [ 117.363928][ T7049] tpg crop: (0,0)/320x240 [ 117.368641][ T7049] tpg compose: (0,0)/320x240 [ 117.383339][ T7049] tpg colorspace: 8 [ 117.390558][ T7049] tpg transfer function: 0/0 [ 117.400101][ T7049] tpg Y'CbCr encoding: 0/0 [ 117.404636][ T7049] tpg quantization: 0/0 [ 117.412558][ T7049] tpg RGB range: 0/2 [ 117.419644][ T7049] vivid-000: ================== END STATUS ================== [ 117.584326][ T7092] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 118.055902][ T5901] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.310385][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.343910][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.421286][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.515734][ T5901] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.516599][ T5927] tipc: Node number set to 11578026 [ 118.527969][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.570901][ T5901] usb 2-1: config 0 descriptor?? [ 119.038643][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.162421][ T30] audit: type=1400 audit(1757463809.811:244): avc: denied { map } for pid=7108 comm="syz.2.402" path="socket:[13870]" dev="sockfs" ino=13870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 119.221818][ T5901] usbhid 2-1:0.0: can't add hid device: -71 [ 119.237208][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 119.294400][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.314482][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.396063][ T9] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 119.471542][ T5901] usb 2-1: USB disconnect, device number 3 [ 119.480238][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.507003][ T9] usb 4-1: config 0 descriptor?? [ 119.848394][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 120.313681][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 120.339340][ T7136] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 120.350184][ T9] usb 4-1: USB disconnect, device number 7 [ 120.392613][ T7136] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.613311][ T7147] 9pnet_fd: Insufficient options for proto=fd [ 120.762681][ T7153] kvm: pic: non byte write [ 120.987583][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 121.153186][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 121.173191][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 121.182764][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.230681][ T9] usb 5-1: config 0 descriptor?? [ 121.622432][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'. [ 121.672284][ T9] wacom 0003:056A:00F8.0003: unknown main item tag 0x5 [ 121.905098][ T5901] usb 5-1: USB disconnect, device number 4 [ 121.934125][ T7179] fuse: Bad value for 'fd' [ 122.060445][ T7186] vivid-000: ================= START STATUS ================= [ 122.070982][ T7186] vivid-000: Test Pattern: 75% Colorbar [ 122.076936][ T7186] vivid-000: Fill Percentage of Frame: 100 [ 122.083154][ T7186] vivid-000: Horizontal Movement: No Movement [ 122.089899][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.101138][ T7186] vivid-000: Vertical Movement: No Movement [ 122.108502][ T7186] vivid-000: OSD Text Mode: All [ 122.113646][ T7186] vivid-000: Show Border: false [ 122.118647][ T7186] vivid-000: Show Square: false [ 122.124593][ T7186] vivid-000: Sensor Flipped Horizontally: false [ 122.131158][ T7186] vivid-000: Sensor Flipped Vertically: false [ 122.137531][ T7186] vivid-000: Insert SAV Code in Image: false [ 122.144022][ T7186] vivid-000: Insert EAV Code in Image: false [ 122.155516][ T7186] vivid-000: Insert Video Guard Band: false [ 122.161527][ T7186] vivid-000: Reduced Framerate: false [ 122.167115][ T7186] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 122.174907][ T7186] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 122.182898][ T7186] vivid-000: Enable Capture Cropping: true [ 122.189219][ T7186] vivid-000: Enable Capture Composing: true [ 122.195150][ T7186] vivid-000: Enable Capture Scaler: true [ 122.200833][ T7186] vivid-000: Timestamp Source: End of Frame [ 122.206918][ T7186] vivid-000: Colorspace: sRGB [ 122.211796][ T7186] vivid-000: Transfer Function: Default [ 122.217889][ T7186] vivid-000: Y'CbCr Encoding: Default [ 122.223645][ T7186] vivid-000: HSV Encoding: Hue 0-179 [ 122.230639][ T7186] vivid-000: Quantization: Default [ 122.237492][ T7186] vivid-000: Apply Alpha To Red Only: false [ 122.244105][ T7186] vivid-000: Standard Aspect Ratio: 4x3 [ 122.251404][ T7186] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 122.344014][ T7186] vivid-000: DV Timings: 640x480p59 inactive [ 122.572732][ T7186] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 122.585764][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 122.593594][ T7186] vivid-000: Maximum EDID Blocks: 2 [ 122.598062][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.599132][ T7186] vivid-000: Limited RGB Range (16-235): [ 122.605442][ T9] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 122.605465][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.611640][ T9] usb 4-1: config 0 descriptor?? [ 122.620544][ T7186] false [ 122.636971][ T7186] vivid-000: Rx RGB Quantization Range: Automatic [ 122.643455][ T7186] vivid-000: Power Present: 0x00000001 [ 122.649171][ T7186] tpg source WxH: 320x240 (Y'CbCr) [ 122.654492][ T7186] tpg field: 1 [ 122.657973][ T7186] tpg crop: (0,0)/320x240 [ 122.662334][ T7186] tpg compose: (0,0)/320x240 [ 122.667661][ T7186] tpg colorspace: 8 [ 122.671468][ T7186] tpg transfer function: 0/0 [ 122.676961][ T7186] tpg Y'CbCr encoding: 0/0 [ 122.681408][ T7186] tpg quantization: 0/0 [ 122.685563][ T7186] tpg RGB range: 0/2 [ 122.689723][ T7186] vivid-000: ================== END STATUS ================== [ 122.721232][ T7191] syz_tun: entered allmulticast mode [ 122.731484][ T7191] dvmrp8: entered allmulticast mode [ 122.742623][ T7190] syz_tun: left allmulticast mode [ 122.932344][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 122.942124][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 122.966624][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 122.981539][ T9] usb 4-1: USB disconnect, device number 8 [ 123.003493][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 123.148978][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'. [ 123.154779][ T7212] fuse: Bad value for 'fd' [ 123.918027][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 124.258574][ T7234] vivid-000: ================= START STATUS ================= [ 124.266733][ T7234] vivid-000: Test Pattern: 75% Colorbar [ 124.272332][ T7234] vivid-000: Fill Percentage of Frame: 100 [ 124.278704][ T7234] vivid-000: Horizontal Movement: No Movement [ 124.284805][ T7234] vivid-000: Vertical Movement: No Movement [ 124.292202][ T7234] vivid-000: OSD Text Mode: All [ 124.299132][ T7234] vivid-000: Show Border: false [ 124.304079][ T7234] vivid-000: Show Square: false [ 124.309208][ T7234] vivid-000: Sensor Flipped Horizontally: false [ 124.315546][ T7234] vivid-000: Sensor Flipped Vertically: false [ 124.323593][ T7234] vivid-000: Insert SAV Code in Image: false [ 124.329667][ T7234] vivid-000: Insert EAV Code in Image: false [ 124.335778][ T7234] vivid-000: Insert Video Guard Band: false [ 124.341727][ T7234] vivid-000: Reduced Framerate: false [ 124.347331][ T7234] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 124.354987][ T7234] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 124.363719][ T7234] vivid-000: Enable Capture Cropping: true [ 124.369594][ T7234] vivid-000: Enable Capture Composing: true [ 124.375506][ T7234] vivid-000: Enable Capture Scaler: true [ 124.381264][ T7234] vivid-000: Timestamp Source: End of Frame [ 124.387498][ T7234] vivid-000: Colorspace: sRGB [ 124.392200][ T7234] vivid-000: Transfer Function: Default [ 124.398128][ T7234] vivid-000: Y'CbCr Encoding: Default [ 124.403527][ T7234] vivid-000: HSV Encoding: Hue 0-179 [ 124.408945][ T7234] vivid-000: Quantization: Default [ 124.414077][ T7234] vivid-000: Apply Alpha To Red Only: false [ 124.423661][ T7234] vivid-000: Standard Aspect Ratio: 4x3 [ 124.432870][ T7234] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 124.443904][ T7234] vivid-000: DV Timings: 640x480p59 inactive [ 124.451132][ T7234] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 124.458649][ T7234] vivid-000: Maximum EDID Blocks: 2 [ 124.463873][ T7234] vivid-000: Limited RGB Range (16-235): false [ 124.470665][ T7234] vivid-000: Rx RGB Quantization Range: Automatic [ 124.477168][ T7234] vivid-000: Power Present: 0x00000001 [ 124.482676][ T7234] tpg source WxH: 320x240 (Y'CbCr) [ 124.488356][ T7234] tpg field: 1 [ 124.491740][ T7234] tpg crop: (0,0)/320x240 [ 124.497713][ T7234] tpg compose: (0,0)/320x240 [ 124.502319][ T7234] tpg colorspace: 8 [ 124.506295][ T7234] tpg transfer function: 0/0 [ 124.510895][ T7234] tpg Y'CbCr encoding: 0/0 [ 124.515309][ T7234] tpg quantization: 0/0 [ 124.519562][ T7234] tpg RGB range: 0/2 [ 124.523467][ T7234] vivid-000: ================== END STATUS ================== [ 124.588579][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 124.597537][ T7228] syz_tun: entered allmulticast mode [ 124.603386][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 124.608587][ T7229] dvmrp8: entered allmulticast mode [ 124.612406][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 124.626365][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 124.639503][ T7223] syz_tun: left allmulticast mode [ 124.660152][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 124.915024][ T7250] fuse: Bad value for 'fd' [ 125.685706][ T5956] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.828191][ T7278] syz.3.467 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.884478][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.899572][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.930352][ T5956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.950332][ T5956] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.973149][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.076674][ T5956] usb 5-1: config 0 descriptor?? [ 126.510519][ T7285] syz.3.469 (7285): drop_caches: 2 [ 126.557015][ T7289] vivid-000: ================= START STATUS ================= [ 126.572312][ T7289] vivid-000: Test Pattern: 75% Colorbar [ 126.588459][ T7289] vivid-000: Fill Percentage of Frame: 100 [ 126.595006][ T7289] vivid-000: Horizontal Movement: No Movement [ 126.608028][ T7289] vivid-000: Vertical Movement: No Movement [ 126.613956][ T7289] vivid-000: OSD Text Mode: All [ 126.626941][ T7289] vivid-000: Show Border: false [ 126.636722][ T7289] vivid-000: Show Square: false [ 126.645852][ T7289] vivid-000: Sensor Flipped Horizontally: false [ 126.658961][ T7289] vivid-000: Sensor Flipped Vertically: false [ 126.665048][ T7289] vivid-000: Insert SAV Code in Image: false [ 126.673920][ T7289] vivid-000: Insert EAV Code in Image: false [ 126.684025][ T7289] vivid-000: Insert Video Guard Band: false [ 126.690739][ T7289] vivid-000: Reduced Framerate: false [ 126.696445][ T7289] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 126.704353][ T7289] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 126.722845][ T7289] vivid-000: Enable Capture Cropping: true [ 126.735144][ T7289] vivid-000: Enable Capture Composing: true [ 126.747722][ T7289] vivid-000: Enable Capture Scaler: true [ 126.755502][ T7289] vivid-000: Timestamp Source: End of Frame [ 126.765533][ T5956] usbhid 5-1:0.0: can't add hid device: -71 [ 126.774896][ T7289] vivid-000: Colorspace: sRGB [ 126.779865][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 126.792443][ T7289] vivid-000: Transfer Function: Default [ 126.807526][ T7289] vivid-000: Y'CbCr Encoding: Default [ 126.814090][ T5956] usb 5-1: USB disconnect, device number 5 [ 126.823708][ T7289] vivid-000: HSV Encoding: Hue 0-179 [ 126.839320][ T7289] vivid-000: Quantization: Default [ 126.847562][ T7289] vivid-000: Apply Alpha To Red Only: false [ 126.857435][ T7289] vivid-000: Standard Aspect Ratio: 4x3 [ 126.863073][ T7289] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 126.876952][ T7289] vivid-000: DV Timings: 640x480p59 inactive [ 126.882973][ T7289] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 126.895516][ T7289] vivid-000: Maximum EDID Blocks: 2 [ 126.901141][ T7289] vivid-000: Limited RGB Range (16-235): false [ 126.913273][ T7289] vivid-000: Rx RGB Quantization Range: Automatic [ 126.920234][ T7289] vivid-000: Power Present: 0x00000001 [ 126.928482][ T7289] tpg source WxH: 320x240 (Y'CbCr) [ 126.933763][ T7289] tpg field: 1 [ 126.937496][ T7289] tpg crop: (0,0)/320x240 [ 126.941883][ T7289] tpg compose: (0,0)/320x240 [ 126.953135][ T7289] tpg colorspace: 8 [ 126.957563][ T7289] tpg transfer function: 0/0 [ 126.962236][ T7289] tpg Y'CbCr encoding: 0/0 [ 126.969472][ T7289] tpg quantization: 0/0 [ 126.973678][ T7289] tpg RGB range: 0/2 [ 126.980210][ T7289] vivid-000: ================== END STATUS ================== [ 127.442258][ T7298] __nla_validate_parse: 6 callbacks suppressed [ 127.442277][ T7298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.474'. [ 127.579960][ T7277] syz_tun: entered allmulticast mode [ 127.585560][ T7277] syz_tun: left allmulticast mode [ 127.838740][ T7307] 9pnet: Could not find request transport: fd0x0000000000000003 [ 128.701295][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'. [ 128.758335][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 128.786606][ T7338] syz_tun: entered allmulticast mode [ 128.794758][ T7337] syz_tun: left allmulticast mode [ 128.934817][ T7347] 9pnet: Could not find request transport: fd0x0000000000000003 [ 129.001868][ T5956] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.503315][ T5956] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 129.515144][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.540918][ T30] audit: type=1400 audit(1757463820.161:245): avc: denied { shutdown } for pid=7344 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.565524][ T5956] usb 3-1: config 0 descriptor?? [ 129.589954][ T5956] cp210x 3-1:0.0: cp210x converter detected [ 129.850578][ T7361] lo speed is unknown, defaulting to 1000 [ 130.002103][ T5956] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 130.077762][ T7376] syz_tun: entered allmulticast mode [ 130.084737][ T7375] syz_tun: left allmulticast mode [ 130.201506][ T7380] 9pnet: Could not find request transport: fd0x0000000000000003 [ 130.249975][ T5956] usb 3-1: cp210x converter now attached to ttyUSB0 [ 130.553892][ T5956] usb 3-1: USB disconnect, device number 4 [ 130.764195][ T30] audit: type=1400 audit(1757463821.031:246): avc: denied { read write } for pid=7382 comm="syz.4.503" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 130.796838][ T30] audit: type=1400 audit(1757463821.031:247): avc: denied { open } for pid=7382 comm="syz.4.503" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 130.823270][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 130.859193][ T5956] cp210x 3-1:0.0: device disconnected [ 131.070607][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.508'. [ 131.277232][ T7408] syz_tun: entered allmulticast mode [ 131.307163][ T7406] syz_tun: left allmulticast mode [ 131.475987][ T7415] 9pnet_fd: Insufficient options for proto=fd [ 131.479944][ T7404] lo speed is unknown, defaulting to 1000 [ 131.540281][ T7420] fuse: Bad value for 'fd' [ 131.586212][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 131.976334][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'. [ 131.986220][ T7439] netlink: 'syz.1.523': attribute type 10 has an invalid length. [ 132.027955][ T7442] syz_tun: entered allmulticast mode [ 132.051525][ T7440] syz_tun: left allmulticast mode [ 132.173645][ T7447] 9pnet_fd: Insufficient options for proto=fd [ 132.207963][ T7449] fuse: Bad value for 'fd' [ 132.392502][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.400405][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.410345][ T1298] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 132.730030][ T7476] fuse: Bad value for 'fd' [ 132.769138][ T7479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 132.786060][ T7478] syz_tun: entered allmulticast mode [ 132.793440][ T7477] syz_tun: left allmulticast mode [ 133.119701][ T7460] lo speed is unknown, defaulting to 1000 [ 133.657079][ T7493] loop2: detected capacity change from 0 to 7 [ 133.682229][ T5860] Dev loop2: unable to read RDB block 7 [ 133.693277][ T5860] loop2: AHDI p1 p2 p3 [ 133.703755][ T5860] loop2: partition table partially beyond EOD, truncated [ 133.725102][ T5860] loop2: p1 start 1601398130 is beyond EOD, truncated [ 133.735482][ T5860] loop2: p2 start 1702059890 is beyond EOD, truncated [ 133.862186][ T7493] Dev loop2: unable to read RDB block 7 [ 133.875815][ T7493] loop2: AHDI p1 p2 p3 [ 133.880008][ T7493] loop2: partition table partially beyond EOD, truncated [ 133.896355][ T7493] loop2: p1 start 1601398130 is beyond EOD, truncated [ 133.981758][ T5853] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 134.085887][ T7493] loop2: p2 start 1702059890 is beyond EOD, truncated [ 134.463688][ T7502] ======================================================= [ 134.463688][ T7502] WARNING: The mand mount option has been deprecated and [ 134.463688][ T7502] and is ignored by this kernel. Remove the mand [ 134.463688][ T7502] option from the mount to silence this warning. [ 134.463688][ T7502] ======================================================= [ 134.874444][ T7509] fuse: Invalid rootmode [ 135.660834][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.552'. [ 136.995129][ T30] audit: type=1400 audit(1757463827.651:248): avc: denied { watch watch_reads } for pid=7540 comm="syz.1.559" path="/proc/300/task/301/ns" dev="proc" ino=15252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.260661][ T30] audit: type=1400 audit(1757463827.921:249): avc: denied { read } for pid=7543 comm="syz.4.561" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.397177][ T30] audit: type=1400 audit(1757463827.921:250): avc: denied { open } for pid=7543 comm="syz.4.561" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.421515][ T30] audit: type=1400 audit(1757463827.951:251): avc: denied { ioctl } for pid=7543 comm="syz.4.561" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.794314][ T30] audit: type=1400 audit(1757463828.451:252): avc: denied { write } for pid=7557 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.862282][ T30] audit: type=1400 audit(1757463828.451:253): avc: denied { nlmsg_write } for pid=7557 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.872709][ T7569] syz.0.571 (7569) used greatest stack depth: 17080 bytes left [ 138.880240][ T30] audit: type=1400 audit(1757463829.001:254): avc: denied { firmware_load } for pid=7565 comm="syz.0.571" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 138.880333][ T5956] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.940902][ T7570] tty tty2: ldisc open failed (-12), clearing slot 1 [ 139.236186][ T5956] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 139.270446][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.280925][ T30] audit: type=1400 audit(1757463829.931:255): avc: denied { create } for pid=7577 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.306532][ T5956] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.326382][ T30] audit: type=1400 audit(1757463829.951:256): avc: denied { write } for pid=7577 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.346110][ T5956] usb 5-1: config 0 has no interface number 0 [ 139.352214][ T5956] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 139.393005][ T5956] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 139.415496][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.506350][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.575'. [ 139.574480][ T5956] usb 5-1: SerialNumber: syz [ 139.582085][ T5956] usb 5-1: config 0 descriptor?? [ 139.594978][ T5956] usb 5-1: Found UVC 0.00 device (0002:0000) [ 139.601939][ T5956] usb 5-1: No valid video chain found. [ 139.698137][ T5853] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 139.776715][ T5955] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.053510][ T5901] usb 5-1: USB disconnect, device number 6 [ 140.148741][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 140.168749][ T5955] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.198295][ T5955] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.355910][ T7598] lo speed is unknown, defaulting to 1000 [ 140.408498][ T5955] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.442032][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 140.523464][ T5955] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 140.532642][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.544677][ T5955] usb 2-1: config 0 descriptor?? [ 140.813747][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 140.884710][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 140.889224][ T7621] fuse: Unknown parameter 'group_i00000000000000000000' [ 141.201348][ T5956] usb 2-1: USB disconnect, device number 4 [ 141.262850][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'. [ 142.814506][ T7652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'. [ 142.893244][ T7658] vivid-000: ================= START STATUS ================= [ 142.936731][ T7658] vivid-000: Test Pattern: 75% Colorbar [ 142.942359][ T7658] vivid-000: Fill Percentage of Frame: 100 [ 143.042516][ T7658] vivid-000: Horizontal Movement: No Movement [ 143.067891][ T7658] vivid-000: Vertical Movement: No Movement [ 143.074264][ T7658] vivid-000: OSD Text Mode: All [ 143.079300][ T7658] vivid-000: Show Border: false [ 143.084232][ T7658] vivid-000: Show Square: false [ 143.089170][ T7658] vivid-000: Sensor Flipped Horizontally: false [ 143.095550][ T7658] vivid-000: Sensor Flipped Vertically: false [ 143.101756][ T7658] vivid-000: Insert SAV Code in Image: false [ 143.109033][ T7658] vivid-000: Insert EAV Code in Image: false [ 143.148332][ T7658] vivid-000: Insert Video Guard Band: false [ 143.249085][ T30] audit: type=1400 audit(1757463833.881:257): avc: denied { mount } for pid=7660 comm="syz.3.604" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.278799][ T7658] vivid-000: Reduced Framerate: false [ 143.309621][ T7658] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 143.394956][ T7658] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 143.439507][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 143.468425][ T7658] vivid-000: Enable Capture Cropping: true [ 143.474356][ T7658] vivid-000: Enable Capture Composing: true [ 143.480394][ T7658] vivid-000: Enable Capture Scaler: true [ 143.486100][ T7658] vivid-000: Timestamp Source: End of Frame [ 143.492351][ T7658] vivid-000: Colorspace: sRGB [ 143.498001][ T7658] vivid-000: Transfer Function: Default [ 143.511039][ T7658] vivid-000: Y'CbCr Encoding: Default [ 143.526647][ T7658] vivid-000: HSV Encoding: Hue 0-179 [ 143.536159][ T7658] vivid-000: Quantization: Default [ 143.552986][ T7658] vivid-000: Apply Alpha To Red Only: false [ 143.573131][ T7658] vivid-000: Standard Aspect Ratio: 4x3 [ 143.594641][ T7658] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 143.603867][ T7658] vivid-000: DV Timings: 640x480p59 inactive [ 143.611389][ T7658] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 143.629419][ T30] audit: type=1400 audit(1757463834.291:258): avc: denied { read } for pid=7675 comm="syz.4.609" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.655715][ T7676] binder: 7675:7676 ioctl 4018620d 0 returned -22 [ 143.670130][ T30] audit: type=1400 audit(1757463834.321:259): avc: denied { open } for pid=7675 comm="syz.4.609" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.698381][ T7658] vivid-000: Maximum EDID Blocks: 2 [ 143.704482][ T7658] vivid-000: Limited RGB Range (16-235): false [ 143.711783][ T7658] vivid-000: Rx RGB Quantization Range: Automatic [ 143.719828][ T30] audit: type=1400 audit(1757463834.321:260): avc: denied { ioctl } for pid=7675 comm="syz.4.609" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.720675][ T7658] vivid-000: Power Present: 0x00000001 [ 143.754707][ T7658] tpg source WxH: 320x240 (Y'CbCr) [ 143.761861][ T30] audit: type=1400 audit(1757463834.321:261): avc: denied { write } for pid=7675 comm="syz.4.609" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.765024][ T7658] tpg field: 1 [ 143.788016][ T7658] tpg crop: (0,0)/320x240 [ 143.792446][ T7658] tpg compose: (0,0)/320x240 [ 143.797151][ T7658] tpg colorspace: 8 [ 143.801074][ T7658] tpg transfer function: 0/0 [ 143.812066][ T7658] tpg Y'CbCr encoding: 0/0 [ 143.819822][ T7658] tpg quantization: 0/0 [ 143.824062][ T7658] tpg RGB range: 0/2 [ 143.833897][ T7658] vivid-000: ================== END STATUS ================== [ 143.887975][ T30] audit: type=1400 audit(1757463834.541:262): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.755977][ T30] audit: type=1400 audit(1757463835.411:263): avc: denied { connect } for pid=7698 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.866303][ T7707] syz.1.619 (7707): drop_caches: 2 [ 144.961998][ T7687] lo speed is unknown, defaulting to 1000 [ 144.963456][ T7712] fuse: Unknown parameter 'group_id00000000000000000000' [ 144.973669][ T7713] vivid-000: ================= START STATUS ================= [ 144.993433][ T7713] vivid-000: Test Pattern: 75% Colorbar [ 145.003998][ T7713] vivid-000: Fill Percentage of Frame: 100 [ 145.023702][ T7713] vivid-000: Horizontal Movement: No Movement [ 145.030534][ T7713] vivid-000: Vertical Movement: No Movement [ 145.043552][ T7713] vivid-000: OSD Text Mode: All [ 145.053627][ T7713] vivid-000: Show Border: false [ 145.059401][ T7713] vivid-000: Show Square: false [ 145.064620][ T7713] vivid-000: Sensor Flipped Horizontally: false [ 145.081130][ T7713] vivid-000: Sensor Flipped Vertically: false [ 145.090276][ T7713] vivid-000: Insert SAV Code in Image: false [ 145.096613][ T7713] vivid-000: Insert EAV Code in Image: false [ 145.102890][ T7713] vivid-000: Insert Video Guard Band: false [ 145.109751][ T7713] vivid-000: Reduced Framerate: false [ 145.115306][ T7713] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 145.124457][ T7713] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 145.132899][ T7713] vivid-000: Enable Capture Cropping: true [ 145.139099][ T7713] vivid-000: Enable Capture Composing: true [ 145.145359][ T7713] vivid-000: Enable Capture Scaler: true [ 145.205851][ T7713] vivid-000: Timestamp Source: End of Frame [ 145.217873][ T7713] vivid-000: Colorspace: sRGB [ 145.235072][ T7713] vivid-000: Transfer Function: Default [ 145.255454][ T7713] vivid-000: Y'CbCr Encoding: Default [ 145.271515][ T7713] vivid-000: HSV Encoding: Hue 0-179 [ 145.281353][ T7713] vivid-000: Quantization: Default [ 145.290824][ T7713] vivid-000: Apply Alpha To Red Only: false [ 145.297072][ T7713] vivid-000: Standard Aspect Ratio: 4x3 [ 145.302934][ T7713] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 145.311027][ T7713] vivid-000: DV Timings: 640x480p59 inactive [ 145.317803][ T7713] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 145.325102][ T7713] vivid-000: Maximum EDID Blocks: 2 [ 145.330651][ T7713] vivid-000: Limited RGB Range (16-235): false [ 145.337052][ T7713] vivid-000: Rx RGB Quantization Range: Automatic [ 145.343491][ T7713] vivid-000: Power Present: 0x00000001 [ 145.349315][ T7713] tpg source WxH: 320x240 (Y'CbCr) [ 145.354575][ T7713] tpg field: 1 [ 145.360508][ T7713] tpg crop: (0,0)/320x240 [ 145.364892][ T7713] tpg compose: (0,0)/320x240 [ 145.369708][ T7713] tpg colorspace: 8 [ 145.460732][ T7713] tpg transfer function: 0/0 [ 145.482413][ T7713] tpg Y'CbCr encoding: 0/0 [ 145.523433][ T7713] tpg quantization: 0/0 [ 145.621477][ T7713] tpg RGB range: 0/2 [ 145.696844][ T7713] vivid-000: ================== END STATUS ================== [ 146.213806][ T7740] fuse: Unknown parameter 'group_id00000000000000000000' [ 146.563940][ T30] audit: type=1400 audit(1757463837.221:264): avc: denied { ioctl } for pid=7752 comm="syz.4.642" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16695 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.743602][ T7767] syz_tun: entered allmulticast mode [ 146.753350][ T7766] syz_tun: left allmulticast mode [ 147.982404][ T30] audit: type=1400 audit(1757463838.511:265): avc: denied { setopt } for pid=7779 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.437829][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.655'. [ 148.449681][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.655'. [ 148.524180][ T30] audit: type=1400 audit(1757463839.181:266): avc: denied { mounton } for pid=7789 comm="syz.0.656" path="/113/file0" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 148.881445][ T7808] syz_tun: entered allmulticast mode [ 148.902842][ T7807] syz_tun: left allmulticast mode [ 148.933436][ T30] audit: type=1400 audit(1757463839.591:267): avc: denied { append } for pid=7813 comm="syz.1.667" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.485770][ T30] audit: type=1400 audit(1757463840.061:268): avc: denied { mount } for pid=7824 comm="syz.2.672" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 150.307027][ T7832] binder: 7831:7832 ioctl c0306201 2000000004c0 returned -14 [ 150.424257][ T30] audit: type=1400 audit(1757463841.071:269): avc: denied { getopt } for pid=7837 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.511950][ T7840] syz_tun: entered allmulticast mode [ 150.531134][ T7839] syz_tun: left allmulticast mode [ 150.632658][ T7846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39940 sclass=netlink_route_socket pid=7846 comm=syz.1.682 [ 150.763183][ T5956] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.775735][ T5927] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 150.867396][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 150.878624][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 150.929114][ T5927] usb 5-1: config index 0 descriptor too short (expected 12580, got 36) [ 150.948384][ T5956] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1031, bcdDevice=10.90 [ 150.965769][ T5927] usb 5-1: config 83 has too many interfaces: 42, using maximum allowed: 32 [ 150.974909][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.983308][ T5927] usb 5-1: config 83 has 1 interface, different from the descriptor's value: 42 [ 150.992894][ T5956] usb 4-1: Product: syz [ 150.997293][ T5956] usb 4-1: Manufacturer: syz [ 151.002132][ T5956] usb 4-1: SerialNumber: syz [ 151.006967][ T5927] usb 5-1: config 83 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.020907][ T5956] usb 4-1: config 0 descriptor?? [ 151.030362][ T5927] usb 5-1: config 83 interface 0 has no altsetting 0 [ 151.045953][ T5927] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 151.055054][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.246717][ T5956] option 4-1:0.0: GSM modem (1-port) converter detected [ 151.275185][ T5927] usb 5-1: string descriptor 0 read error: -71 [ 151.300042][ T5956] usb 4-1: USB disconnect, device number 9 [ 151.308006][ T5927] usbhid 5-1:83.0: can't add hid device: -71 [ 151.314847][ T5956] option 4-1:0.0: device disconnected [ 151.321308][ T5927] usbhid 5-1:83.0: probe with driver usbhid failed with error -71 [ 151.338641][ T5927] usb 5-1: USB disconnect, device number 7 [ 152.128115][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'. [ 152.876761][ T7873] netlink: 165 bytes leftover after parsing attributes in process `syz.4.691'. [ 153.357295][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 154.821758][ T7884] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 155.086099][ T30] audit: type=1400 audit(1757463845.751:270): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.245793][ T5927] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 155.393229][ T5927] usb 5-1: device descriptor read/64, error -71 [ 156.673935][ T30] audit: type=1400 audit(1757463847.331:271): avc: denied { accept } for pid=7905 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.414624][ T7934] cgroup: Unknown subsys name 'cpuset' [ 157.618137][ T7936] syz.0.707 (7936): drop_caches: 2 [ 157.822362][ T7949] Illegal XDP return value 4294967294 on prog (id 76) dev N/A, expect packet loss! [ 157.916155][ T7953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39940 sclass=netlink_route_socket pid=7953 comm=syz.1.715 [ 158.016161][ T5927] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 158.110701][ T7957] syz_tun: entered allmulticast mode [ 158.127573][ T7955] syz_tun: left allmulticast mode [ 158.219353][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.234886][ T5927] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 158.244890][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.255373][ T5927] usb 5-1: config 0 descriptor?? [ 159.652369][ T30] audit: type=1400 audit(1757463850.311:272): avc: denied { checkpoint_restore } for pid=7967 comm="syz.1.723" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.982364][ T5955] usb 5-1: USB disconnect, device number 10 [ 160.193407][ T7977] tipc: Enabling of bearer rejected, already enabled [ 160.379898][ T30] audit: type=1400 audit(1757463851.041:273): avc: denied { append } for pid=7980 comm="syz.1.728" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.404224][ T30] audit: type=1400 audit(1757463851.041:274): avc: denied { open } for pid=7980 comm="syz.1.728" path="/152/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.665871][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 160.994018][ T78] smc: removing ib device syz1 [ 161.111164][ T5927] syz1: Port: 1 Link DOWN [ 161.140772][ T8000] cgroup: Name too long [ 162.460207][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.739'. [ 162.534878][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.739'. [ 162.560177][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.739'. [ 162.572585][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.739'. [ 162.629090][ T30] audit: type=1400 audit(1757463853.291:275): avc: denied { block_suspend } for pid=8017 comm="syz.2.741" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.972041][ T8014] syz.1.740 (8014): drop_caches: 2 [ 163.196889][ T8032] lo speed is unknown, defaulting to 1000 [ 163.200000][ T30] audit: type=1400 audit(1757463853.861:276): avc: denied { create } for pid=8036 comm="syz.2.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 163.250137][ T30] audit: type=1400 audit(1757463853.901:277): avc: denied { sys_admin } for pid=8036 comm="syz.2.748" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 163.318626][ T30] audit: type=1400 audit(1757463853.981:278): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 163.340573][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 163.756974][ T30] audit: type=1326 audit(1757463854.421:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353fb8eba9 code=0x7ffc0000 [ 163.829531][ T30] audit: type=1326 audit(1757463854.461:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f353fb8eba9 code=0x7ffc0000 [ 164.287875][ T30] audit: type=1326 audit(1757463854.461:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353fb8eba9 code=0x7ffc0000 [ 164.378947][ T30] audit: type=1326 audit(1757463854.461:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353fb8eba9 code=0x7ffc0000 [ 164.815694][ T5908] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.933209][ T8087] tipc: Enabling of bearer rejected, already enabled [ 164.968125][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.983400][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.998254][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.013166][ T5908] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.015670][ T840] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.023743][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.048499][ T5908] usb 4-1: config 0 descriptor?? [ 165.197485][ T840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.210102][ T840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.219948][ T840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.232945][ T840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.242134][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.252016][ T840] usb 3-1: config 0 descriptor?? [ 165.424265][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.774'. [ 165.484029][ T5908] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 165.712179][ T8113] tipc: Enabling of bearer rejected, already enabled [ 165.758692][ T5927] usb 4-1: USB disconnect, device number 10 [ 165.770979][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.783'. [ 165.782386][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.783'. [ 165.795344][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.783'. [ 165.804604][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.783'. [ 165.855434][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 165.855462][ T30] audit: type=1400 audit(1757463856.511:326): avc: denied { create } for pid=8119 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.884103][ T840] usbhid 3-1:0.0: can't add hid device: -71 [ 165.890422][ T840] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 165.898673][ T30] audit: type=1400 audit(1757463856.561:327): avc: denied { write } for pid=8119 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.910387][ T840] usb 3-1: USB disconnect, device number 5 [ 165.961666][ T78] nci: nci_ntf_packet: unknown ntf opcode 0x13d [ 166.189898][ T8134] syz.1.787 (8134): drop_caches: 2 [ 166.350796][ T8136] SELinux: Context Ü is not valid (left unmapped). [ 166.559638][ T8147] fuse: Bad value for 'group_id' [ 166.564638][ T8147] fuse: Bad value for 'group_id' [ 166.598393][ T8150] netlink: 96 bytes leftover after parsing attributes in process `syz.0.795'. [ 166.933763][ T30] audit: type=1400 audit(1757463857.591:328): avc: denied { setopt } for pid=8161 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.005499][ T30] audit: type=1400 audit(1757463857.661:329): avc: denied { create } for pid=8164 comm="syz.4.801" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.027487][ T30] audit: type=1400 audit(1757463857.661:330): avc: denied { read execute } for pid=8164 comm="syz.4.801" name="file0" dev="tmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.055833][ T30] audit: type=1400 audit(1757463857.661:331): avc: denied { module_load } for pid=8164 comm="syz.4.801" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 167.088438][ T30] audit: type=1400 audit(1757463857.741:332): avc: denied { write } for pid=8159 comm="syz.2.799" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 167.112424][ T30] audit: type=1400 audit(1757463857.741:333): avc: denied { open } for pid=8159 comm="syz.2.799" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 167.162642][ T30] audit: type=1400 audit(1757463857.821:334): avc: denied { unlink } for pid=5851 comm="syz-executor" name="file0" dev="tmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.426623][ T5908] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.593090][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.611710][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.638964][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.659665][ T5908] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.669127][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.681512][ T5908] usb 5-1: config 0 descriptor?? [ 168.294568][ T8177] fuse: Bad value for 'group_id' [ 168.300217][ T8177] fuse: Bad value for 'group_id' [ 168.367499][ T30] audit: type=1326 audit(1757463859.031:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 168.421030][ T8183] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.483152][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 168.489412][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 168.514992][ T5908] usb 5-1: USB disconnect, device number 11 [ 168.614356][ T8197] syz.3.815 uses obsolete (PF_INET,SOCK_PACKET) [ 168.651252][ T8201] fuse: Bad value for 'group_id' [ 168.665943][ T8201] fuse: Bad value for 'group_id' [ 168.694747][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.818'. [ 168.704266][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.818'. [ 168.750365][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.818'. [ 168.765817][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.818'. [ 168.855032][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.818'. [ 169.538076][ T8226] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 169.538076][ T8226] program }\)\ not setting count and/or reply_len properly [ 169.974817][ T5853] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 170.126970][ T5908] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.447663][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.479131][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.494575][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.602482][ T5908] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.611982][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.626571][ T5908] usb 2-1: config 0 descriptor?? [ 170.635288][ T8256] syz.2.836 (8256): drop_caches: 2 [ 170.805591][ T8272] __nla_validate_parse: 8 callbacks suppressed [ 170.817460][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 170.826962][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 170.840022][ T8274] capability: warning: `syz.4.846' uses deprecated v2 capabilities in a way that may be insecure [ 170.841838][ T8272] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 170.859961][ T8272] bridge0: port 3(team0) entered blocking state [ 170.866572][ T8272] bridge0: port 3(team0) entered disabled state [ 170.873850][ T8272] team0: entered allmulticast mode [ 170.883108][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 170.883124][ T30] audit: type=1400 audit(1757463861.541:419): avc: denied { write } for pid=8273 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.911430][ T8272] team_slave_0: entered allmulticast mode [ 170.918352][ T8272] team_slave_1: entered allmulticast mode [ 170.929925][ T8272] team0: entered promiscuous mode [ 170.935223][ T30] audit: type=1400 audit(1757463861.541:420): avc: denied { setopt } for pid=8273 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.935824][ T8272] team_slave_0: entered promiscuous mode [ 170.963477][ T8272] team_slave_1: entered promiscuous mode [ 170.971568][ T8272] bridge0: port 3(team0) entered blocking state [ 170.978133][ T8272] bridge0: port 3(team0) entered forwarding state [ 171.038949][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 171.184364][ T30] audit: type=1400 audit(1757463861.841:421): avc: denied { getopt } for pid=8284 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.266318][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 171.272968][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.285982][ T5908] usb 2-1: USB disconnect, device number 5 [ 172.561272][ T30] audit: type=1400 audit(1757463863.221:422): avc: denied { create } for pid=8302 comm="syz.1.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.598442][ T30] audit: type=1400 audit(1757463863.221:423): avc: denied { ioctl } for pid=8302 comm="syz.1.856" path="socket:[19080]" dev="sockfs" ino=19080 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.706395][ T30] audit: type=1326 audit(1757463863.371:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95218eba9 code=0x7ffc0000 [ 277.765570][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 277.772542][ C1] rcu: 0-...!: (1 GPs behind) idle=2cf4/1/0x4000000000000000 softirq=36814/36817 fqs=2 [ 277.782837][ C1] rcu: (detected by 1, t=10502 jiffies, g=21681, q=168 ncpus=2) [ 277.790545][ C1] Sending NMI from CPU 1 to CPUs 0: [ 277.790568][ C0] NMI backtrace for cpu 0 [ 277.790579][ C0] CPU: 0 UID: 0 PID: 8306 Comm: syz.3.857 Not tainted syzkaller #0 PREEMPT(full) [ 277.790595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.790602][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0xe/0x20 [ 277.790622][ C0] Code: ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 277.790634][ C0] RSP: 0018:ffffc90000007df8 EFLAGS: 00000046 [ 277.790645][ C0] RAX: dffffc0000000000 RBX: ffff8880366ac340 RCX: ffffffff8b907998 [ 277.790654][ C0] RDX: ffff8880366ac340 RSI: ffff8880366ac340 RDI: ffff8880366ac340 [ 277.790661][ C0] RBP: ffff8880366ac340 R08: 0000000000000005 R09: 000000000000001f [ 277.790669][ C0] R10: 0000000000000001 R11: ffffffff9b0d7ea8 R12: ffff8880b8427c80 [ 277.790677][ C0] R13: 0000000000000000 R14: ffff8880366ac340 R15: 0000000000000001 [ 277.790685][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 277.790698][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.790706][ C0] CR2: 0000000000000000 CR3: 000000000e380000 CR4: 00000000003526f0 [ 277.790714][ C0] Call Trace: [ 277.790719][ C0] [ 277.790723][ C0] timerqueue_add+0x48/0x330 [ 277.790746][ C0] __hrtimer_run_queues+0x8ff/0xad0 [ 277.790764][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 277.790777][ C0] ? read_tsc+0x9/0x20 [ 277.790795][ C0] hrtimer_interrupt+0x397/0x8e0 [ 277.790814][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 277.790830][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 277.790845][ C0] [ 277.790849][ C0] [ 277.790853][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.790867][ C0] RIP: 0010:pfn_valid+0x1d7/0x4d0 [ 277.790880][ C0] Code: e5 41 83 e5 02 4c 89 ee e8 56 e8 8d ff 4d 85 ed 0f 84 dd 00 00 00 e8 d8 ec 8d ff 4d 89 e5 31 ff 41 bc 01 00 00 00 41 83 e5 08 <4c> 89 ee e8 31 e8 8d ff 4d 85 ed 75 56 e8 b7 ec 8d ff 48 8d 7d 08 [ 277.790891][ C0] RSP: 0018:ffffc9001bfef518 EFLAGS: 00000202 [ 277.790900][ C0] RAX: 0000000000000000 RBX: 000000000005da3c RCX: ffffffff822da1ea [ 277.790908][ C0] RDX: ffff888033bea440 RSI: ffffffff822da1f8 RDI: 0000000000000000 [ 277.790916][ C0] RBP: ffff88813fffa560 R08: 0000000000000007 R09: 0000000000000000 [ 277.790923][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 277.790931][ C0] R13: 0000000000000008 R14: dffffc0000000000 R15: 0000000000000000 [ 277.790941][ C0] ? pfn_valid+0x1ba/0x4d0 [ 277.790952][ C0] ? pfn_valid+0x1c8/0x4d0 [ 277.790965][ C0] ? pfn_valid+0x1c8/0x4d0 [ 277.790977][ C0] page_table_check_clear+0x21/0x740 [ 277.790990][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 277.791006][ C0] __page_table_check_pte_clear+0xf1/0x100 [ 277.791019][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 277.791033][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 277.791055][ C0] unmap_page_range+0x24fc/0x42c0 [ 277.791079][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 277.791099][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 277.791117][ C0] ? uprobe_munmap+0x20/0x5c0 [ 277.791134][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 277.791151][ C0] unmap_vmas+0x218/0x470 [ 277.791167][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 277.791189][ C0] exit_mmap+0x1b9/0xb90 [ 277.791206][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 277.791224][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 277.791249][ C0] __mmput+0x12a/0x410 [ 277.791265][ C0] mmput+0x62/0x70 [ 277.791279][ C0] do_exit+0x7c7/0x2bf0 [ 277.791295][ C0] ? find_held_lock+0x2b/0x80 [ 277.791312][ C0] ? __pfx_do_exit+0x10/0x10 [ 277.791328][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 277.791341][ C0] ? find_held_lock+0x2b/0x80 [ 277.791357][ C0] do_group_exit+0xd3/0x2a0 [ 277.791375][ C0] get_signal+0x2673/0x26d0 [ 277.791392][ C0] ? audit_log_end+0x14a/0x2b0 [ 277.791410][ C0] ? __pfx_get_signal+0x10/0x10 [ 277.791425][ C0] ? do_futex+0x122/0x350 [ 277.791444][ C0] ? __pfx_do_futex+0x10/0x10 [ 277.791462][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 277.791479][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 277.791501][ C0] exit_to_user_mode_loop+0x84/0x110 [ 277.791514][ C0] do_syscall_64+0x3f6/0x4c0 [ 277.791530][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.791541][ C0] RIP: 0033:0x7fb95218eba9 [ 277.791550][ C0] Code: Unable to access opcode bytes at 0x7fb95218eb7f. [ 277.791556][ C0] RSP: 002b:00007fb952fe60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.791567][ C0] RAX: 0000000000000001 RBX: 00007fb9523d5fa8 RCX: 00007fb95218eba9 [ 277.791575][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9523d5fac [ 277.791582][ C0] RBP: 00007fb9523d5fa0 R08: 00007fb952fe7000 R09: 0000000000000000 [ 277.791590][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.791597][ C0] R13: 00007fb9523d6038 R14: 00007ffde59f9be0 R15: 00007ffde59f9cc8 [ 277.791611][ C0] [ 277.792563][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g21681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 278.291775][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 278.301729][ C1] rcu: RCU grace-period kthread stack dump: [ 278.307603][ C1] task:rcu_preempt state:R running task stack:27256 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 278.321080][ C1] Call Trace: [ 278.324345][ C1] [ 278.327267][ C1] __schedule+0x1190/0x5de0 [ 278.331775][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 278.336719][ C1] ? __pfx___schedule+0x10/0x10 [ 278.341563][ C1] ? find_held_lock+0x2b/0x80 [ 278.346238][ C1] ? schedule+0x2d7/0x3a0 [ 278.350559][ C1] schedule+0xe7/0x3a0 [ 278.354616][ C1] schedule_timeout+0x123/0x290 [ 278.359452][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 278.364808][ C1] ? __pfx_process_timeout+0x10/0x10 [ 278.370087][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 278.375882][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 278.381342][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 278.386094][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 278.391366][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.396552][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 278.401472][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 278.406313][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 278.412123][ C1] rcu_gp_kthread+0x270/0x380 [ 278.416788][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 278.421970][ C1] ? rcu_is_watching+0x12/0xc0 [ 278.426727][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.431917][ C1] ? __kthread_parkme+0x19e/0x250 [ 278.436937][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 278.442124][ C1] kthread+0x3c2/0x780 [ 278.446179][ C1] ? __pfx_kthread+0x10/0x10 [ 278.450757][ C1] ? rcu_is_watching+0x12/0xc0 [ 278.455513][ C1] ? __pfx_kthread+0x10/0x10 [ 278.460092][ C1] ret_from_fork+0x5d4/0x6f0 [ 278.464668][ C1] ? __pfx_kthread+0x10/0x10 [ 278.469243][ C1] ret_from_fork_asm+0x1a/0x30 [ 278.474009][ C1] [ 278.477014][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 278.483327][ C1] CPU: 1 UID: 0 PID: 1158 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 278.492767][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.502809][ C1] Workqueue: events_unbound toggle_allocation_gate [ 278.509299][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 278.515968][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 d5 ff 0b 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 278.535562][ C1] RSP: 0018:ffffc900040af888 EFLAGS: 00000293 [ 278.541619][ C1] RAX: 0000000000000000 RBX: ffff8880b8442000 RCX: ffffffff81af8f21 [ 278.549574][ C1] RDX: ffff8880288c4880 RSI: ffffffff81af8efb RDI: 0000000000000005 [ 278.557537][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 278.565495][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 278.573450][ C1] R13: ffffed1017088401 R14: 0000000000000001 R15: 0000000000000000 [ 278.581405][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 278.590324][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.596893][ C1] CR2: 000000110c3c19c7 CR3: 000000000e380000 CR4: 00000000003526f0 [ 278.604853][ C1] Call Trace: [ 278.608115][ C1] [ 278.611036][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 278.616056][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 278.622384][ C1] ? __pfx___text_poke+0x10/0x10 [ 278.627310][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 278.632328][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 278.637434][ C1] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 278.643924][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 278.649633][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 278.654649][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 278.660886][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 278.667120][ C1] ? find_held_lock+0x2b/0x80 [ 278.671790][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 278.677759][ C1] jump_label_update+0x376/0x550 [ 278.682693][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 278.688577][ C1] static_key_enable+0x1a/0x20 [ 278.693332][ C1] toggle_allocation_gate+0xfa/0x280 [ 278.698606][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 278.704493][ C1] ? rcu_is_watching+0x12/0xc0 [ 278.709253][ C1] process_one_work+0x9cc/0x1b70 [ 278.714192][ C1] ? __pfx_process_one_work+0x10/0x10 [ 278.719560][ C1] ? assign_work+0x1a0/0x250 [ 278.724138][ C1] worker_thread+0x6c8/0xf10 [ 278.728722][ C1] ? __kthread_parkme+0x19e/0x250 [ 278.733743][ C1] ? __pfx_worker_thread+0x10/0x10 [ 278.738843][ C1] kthread+0x3c2/0x780 [ 278.742900][ C1] ? __pfx_kthread+0x10/0x10 [ 278.747479][ C1] ? rcu_is_watching+0x12/0xc0 [ 278.752268][ C1] ? __pfx_kthread+0x10/0x10 [ 278.756848][ C1] ret_from_fork+0x5d4/0x6f0 [ 278.761425][ C1] ? __pfx_kthread+0x10/0x10 [ 278.766003][ C1] ret_from_fork_asm+0x1a/0x30 [ 278.770770][ C1]