last executing test programs: 40.160800081s ago: executing program 4 (id=474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write(r0, 0x0, 0x0) close_range(r0, r0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 39.975755289s ago: executing program 4 (id=477): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) 39.807438328s ago: executing program 4 (id=481): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x0, 0x483, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x2, 0x21, 0x1, 0x200, 0x0}) 39.487123087s ago: executing program 4 (id=485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) 30.889718833s ago: executing program 4 (id=485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) 21.890721639s ago: executing program 4 (id=485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) 21.665830597s ago: executing program 0 (id=628): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000009014d564b"]) 21.622822346s ago: executing program 1 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 21.481024745s ago: executing program 1 (id=631): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="001304"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x20, 0x18, 0x12, "e440877e1aeff9a181975b9cc2a535b966cd"}, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 21.390013571s ago: executing program 0 (id=632): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 21.291255555s ago: executing program 0 (id=634): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x44) 21.049828633s ago: executing program 0 (id=637): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100003040000000000000000000000c8", @ANYRES32=0x0, @ANYBLOB="42420000000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 20.585875363s ago: executing program 0 (id=643): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) 20.383465161s ago: executing program 0 (id=646): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/112, 0x70}], 0x1, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 19.207365726s ago: executing program 1 (id=655): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32, @ANYBLOB="05003480c400000b0ecabf600da0cad806002400c8af0000a93c2c9572e7d53ed3ec0000000000000bd6d101349f03b639a63cf19a014cfd6dbd98807655284d7268d9"], 0x34}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.204881048s ago: executing program 3 (id=656): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x2, 0x4, 0xfffffffd, 0x10001, 0x0, 0xfffffffffffffffa, 0x5, 0x0, 0x0, 0x9, 0xfffffffb, 0x2}) 18.594395704s ago: executing program 3 (id=658): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 17.64300122s ago: executing program 2 (id=661): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) fcntl$setstatus(r1, 0x4, 0x42800) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) 17.393809442s ago: executing program 1 (id=662): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) 17.33765761s ago: executing program 2 (id=663): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x8, 0x7f, 0x3, 0x2, 0x7ca48000000, 0x3, 0x100, 0xff, 0x1}) 17.024347471s ago: executing program 1 (id=664): gettid() r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) 16.740123965s ago: executing program 3 (id=665): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = io_uring_setup(0x6161, &(0x7f0000000100)={0x0, 0x424f, 0x0, 0xffffffff, 0x8001f0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="07000000010000", 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 16.660976437s ago: executing program 3 (id=666): r0 = io_uring_setup(0x1d06, &(0x7f00000003c0)={0x0, 0x903, 0x10000, 0x0, 0x36d}) r1 = creat(&(0x7f0000000600)='./file0\x00', 0x12c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2}}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 16.49415114s ago: executing program 3 (id=667): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 16.4237717s ago: executing program 2 (id=669): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) read(r1, &(0x7f0000000640)=""/4096, 0x1000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close_range(r0, r1, 0x0) 16.389750212s ago: executing program 3 (id=670): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r1, 0xd, 0x11, r4, 0x0) 16.081546783s ago: executing program 1 (id=671): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001140)={{0x4, 0xfffc, 0x9, 0xd}, 'syz0\x00', 0xd}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x39, {0x0, 0x0, 0xb, 0x0, 0x4}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 15.531902187s ago: executing program 2 (id=672): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x0) 15.500360122s ago: executing program 2 (id=673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) mkdir(0x0, 0x0) chdir(0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x20042, 0x45) fsync(r1) 15.45995831s ago: executing program 2 (id=674): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x1000000, 0xe, 0x0, 0x0) 5.116883429s ago: executing program 32 (id=646): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/112, 0x70}], 0x1, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 1.001743942s ago: executing program 33 (id=671): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001140)={{0x4, 0xfffc, 0x9, 0xd}, 'syz0\x00', 0xd}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x39, {0x0, 0x0, 0xb, 0x0, 0x4}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 959.172174ms ago: executing program 34 (id=670): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r1, 0xd, 0x11, r4, 0x0) 0s ago: executing program 35 (id=674): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x1000000, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): ntered promiscuous mode [ 58.385615][ T5828] veth1_vlan: entered promiscuous mode [ 58.404133][ T5817] veth0_macvtap: entered promiscuous mode [ 58.413397][ T5817] veth1_macvtap: entered promiscuous mode [ 58.441717][ T5815] veth0_macvtap: entered promiscuous mode [ 58.452698][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.462615][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.473738][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.484569][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.494690][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.509978][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.520828][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.531937][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.541905][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.551048][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.561188][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.569972][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.585576][ T5815] veth1_macvtap: entered promiscuous mode [ 58.595717][ T5828] veth0_macvtap: entered promiscuous mode [ 58.604278][ T5828] veth1_macvtap: entered promiscuous mode [ 58.613334][ T5816] veth0_vlan: entered promiscuous mode [ 58.624938][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.635815][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.645795][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.656302][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.667435][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.676407][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.685765][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.694917][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.703695][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.723866][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.734436][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.745237][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.756270][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.767280][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.776617][ T5816] veth1_vlan: entered promiscuous mode [ 58.801629][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.812625][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.823492][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.834095][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.844083][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.854570][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.865221][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.875356][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.885527][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.894269][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.903567][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.946998][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.957273][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.959665][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.977785][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.988141][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.998603][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.009973][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.020656][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.030986][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.053562][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.062395][ T5830] Bluetooth: hci2: command tx timeout [ 59.067998][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.077252][ T5830] Bluetooth: hci3: command tx timeout [ 59.081424][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.091893][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.104221][ T5816] veth0_macvtap: entered promiscuous mode [ 59.131521][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.139797][ T5830] Bluetooth: hci4: command tx timeout [ 59.140025][ T5825] Bluetooth: hci1: command tx timeout [ 59.147894][ T5816] veth1_macvtap: entered promiscuous mode [ 59.154105][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.164063][ T5825] Bluetooth: hci0: command tx timeout [ 59.180460][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.183590][ T29] audit: type=1400 audit(1740707778.738:112): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.AwcwMa/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.191031][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.226162][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.236608][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.246791][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.257373][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.267325][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.277768][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.288894][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.336175][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.347086][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.359052][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.369616][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.379808][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.390344][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.400520][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.411075][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.425249][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.434644][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.436649][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.447805][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.467207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.475457][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.484330][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.493040][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.521246][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.540779][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.548677][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.557292][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.624831][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.631303][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.635274][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.644703][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.728471][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.746468][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.755174][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.768583][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.830824][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.846011][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.903446][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 59.903460][ T29] audit: type=1400 audit(1740707779.468:130): avc: denied { create } for pid=5908 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.998345][ T29] audit: type=1400 audit(1740707779.508:131): avc: denied { bind } for pid=5908 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.030070][ T29] audit: type=1400 audit(1740707779.508:132): avc: denied { setopt } for pid=5908 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.053922][ T29] audit: type=1400 audit(1740707779.508:133): avc: denied { accept } for pid=5908 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.057875][ T5914] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 60.136880][ T29] audit: type=1400 audit(1740707779.508:134): avc: denied { write } for pid=5908 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.167041][ T29] audit: type=1400 audit(1740707779.548:135): avc: denied { create } for pid=5911 comm="syz.3.4" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.235676][ T29] audit: type=1400 audit(1740707779.558:136): avc: denied { ioctl } for pid=5911 comm="syz.3.4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7676 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.270356][ T29] audit: type=1400 audit(1740707779.568:137): avc: denied { read } for pid=5908 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.315115][ T29] audit: type=1400 audit(1740707779.728:138): avc: denied { map_create } for pid=5916 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.344042][ T29] audit: type=1400 audit(1740707779.728:139): avc: denied { map_read map_write } for pid=5916 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.543820][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 60.714155][ T5938] Bluetooth: MGMT ver 1.23 [ 60.990258][ T5901] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.089052][ T5960] netlink: 'syz.2.21': attribute type 4 has an invalid length. [ 61.105252][ T5960] netlink: 'syz.2.21': attribute type 4 has an invalid length. [ 61.132765][ T5962] input: syz1 as /devices/virtual/input/input5 [ 61.139805][ T5830] Bluetooth: hci3: command tx timeout [ 61.139813][ T5831] Bluetooth: hci2: command tx timeout [ 61.159606][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.174911][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.186073][ T5901] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 61.195739][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.206774][ T5901] usb 2-1: config 0 descriptor?? [ 61.219107][ T5830] Bluetooth: hci4: command tx timeout [ 61.223831][ T5831] Bluetooth: hci0: command tx timeout [ 61.224486][ T5830] Bluetooth: hci1: command tx timeout [ 61.240288][ T5858] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.434233][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.450386][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.492588][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.508182][ T5858] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 61.530967][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.549624][ T5858] usb 4-1: config 0 descriptor?? [ 61.625204][ T5901] hid (null): bogus close delimiter [ 61.646200][ T5901] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 61.661135][ T5901] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 61.678570][ T5901] hid-steam 0003:28DE:1142.0001: bogus close delimiter [ 61.686634][ T5901] hid-steam 0003:28DE:1142.0001: item 0 2 2 10 parsing failed [ 61.705137][ T5901] hid-steam 0003:28DE:1142.0001: steam_probe:parse of hid interface failed [ 61.759213][ T5901] hid-steam 0003:28DE:1142.0001: probe with driver hid-steam failed with error -22 [ 61.860619][ T5869] usb 2-1: USB disconnect, device number 2 [ 61.964907][ T5858] thrustmaster 0003:044F:B65A.0002: item fetching failed at offset 5/7 [ 61.974304][ T5858] thrustmaster 0003:044F:B65A.0002: parse failed [ 61.981351][ T5858] thrustmaster 0003:044F:B65A.0002: probe with driver thrustmaster failed with error -22 [ 62.230404][ T5858] usb 4-1: USB disconnect, device number 2 [ 62.739303][ T5825] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 63.035789][ T6039] warning: `syz.4.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.178134][ T6045] netlink: 96 bytes leftover after parsing attributes in process `syz.0.51'. [ 63.223531][ T5825] Bluetooth: hci3: command tx timeout [ 63.223539][ T5830] Bluetooth: hci2: command tx timeout [ 63.299076][ T5825] Bluetooth: hci0: command 0x0419 tx timeout [ 63.303452][ T5830] Bluetooth: hci4: command tx timeout [ 63.310465][ T5825] Bluetooth: hci1: command tx timeout [ 63.398202][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 63.567060][ T5858] IPVS: starting estimator thread 0... [ 63.700066][ T6068] IPVS: using max 27 ests per chain, 64800 per kthread [ 63.870736][ T6079] SELinux: failed to load policy [ 63.890816][ T6087] xt_hashlimit: size too large, truncated to 1048576 [ 64.021171][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.190337][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.210404][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 64.224843][ T5901] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 64.255841][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 8386, setting to 1024 [ 64.301817][ T5901] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 64.319366][ T5901] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.335522][ T5901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.378748][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.397473][ T5901] usb 1-1: Product: syz [ 64.409925][ T5901] usb 1-1: Manufacturer: syz [ 64.415793][ T5901] usb 1-1: SerialNumber: syz [ 64.442688][ T6081] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.676533][ T6111] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 64.936496][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 64.936508][ T29] audit: type=1400 audit(1740707784.498:216): avc: denied { name_bind } for pid=6121 comm="syz.4.87" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 64.976644][ T29] audit: type=1400 audit(1740707784.498:217): avc: denied { node_bind } for pid=6121 comm="syz.4.87" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.999717][ T29] audit: type=1400 audit(1740707784.508:218): avc: denied { write } for pid=6121 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.028446][ T29] audit: type=1400 audit(1740707784.508:219): avc: denied { nlmsg_read } for pid=6121 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.057967][ T29] audit: type=1400 audit(1740707784.618:220): avc: denied { create } for pid=6124 comm="syz.3.88" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.130953][ T29] audit: type=1400 audit(1740707784.618:221): avc: denied { write } for pid=6124 comm="syz.3.88" name="file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.161696][ T29] audit: type=1400 audit(1740707784.618:222): avc: denied { open } for pid=6124 comm="syz.3.88" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.206892][ T29] audit: type=1400 audit(1740707784.668:223): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.233234][ T29] audit: type=1400 audit(1740707784.748:224): avc: denied { name_connect } for pid=6128 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 65.262304][ T29] audit: type=1400 audit(1740707784.768:225): avc: denied { listen } for pid=6128 comm="syz.4.90" lport=44349 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.379889][ T5830] Bluetooth: hci0: command 0x0419 tx timeout [ 65.428383][ T6143] use of bytesused == 0 is deprecated and will be removed in the future, [ 65.437701][ T6143] use the actual size instead. [ 65.443057][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.484186][ T5901] cdc_mbim 1-1:1.0: bind() failure [ 65.495077][ T5901] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 65.535097][ T5901] usb 1-1: USB disconnect, device number 2 [ 65.575097][ T6147] block device autoloading is deprecated and will be removed. [ 65.584980][ T6147] syz.2.97: attempt to access beyond end of device [ 65.584980][ T6147] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 65.599009][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 65.606891][ T5870] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 65.624275][ T5870] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 65.651246][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.672036][ T5870] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.683345][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.702558][ T5870] usb 4-1: Product: syz [ 65.712209][ T5870] usb 4-1: Manufacturer: syz [ 65.715806][ T6151] netlink: 'syz.4.98': attribute type 4 has an invalid length. [ 65.723657][ T5870] usb 4-1: SerialNumber: syz [ 65.724480][ T6151] netlink: 17 bytes leftover after parsing attributes in process `syz.4.98'. [ 66.039123][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.149060][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.210358][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.223510][ T5870] usb 4-1: 0:2 : does not exist [ 66.239133][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.249392][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 66.262421][ T5870] usb 4-1: USB disconnect, device number 3 [ 66.269727][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.289056][ T5858] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.317102][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.319267][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 66.348481][ T5901] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 66.355968][ T5858] usb 5-1: config 0 descriptor?? [ 66.363905][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.379897][ T5901] usb 3-1: config 0 descriptor?? [ 66.462281][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.599153][ T5901] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 66.611699][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 66.624857][ T5901] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 66.629466][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.633105][ T5901] usb 3-1: media controller created [ 66.653851][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.796539][ T5858] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 66.812781][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 66.821016][ T5858] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 66.838620][ T5869] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 66.856809][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.865862][ T5858] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 66.883970][ T5869] usb 1-1: config 0 descriptor?? [ 66.900135][ T5869] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 67.419422][ T5901] az6027: usb out operation failed. (-71) [ 67.431108][ T5901] stb0899_attach: Driver disabled by Kconfig [ 67.446044][ T5901] az6027: no front-end attached [ 67.446044][ T5901] [ 67.459752][ T5901] az6027: usb out operation failed. (-71) [ 67.468643][ T5901] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 67.485076][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 67.515417][ T5901] dvb-usb: schedule remote query interval to 400 msecs. [ 67.533612][ T5901] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 67.558172][ T5901] usb 3-1: USB disconnect, device number 2 [ 67.642503][ T6212] loop2: detected capacity change from 0 to 7 [ 67.665191][ T5901] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 67.674229][ T6212] Dev loop2: unable to read RDB block 7 [ 67.687654][ T6212] loop2: AHDI p2 p3 [ 67.693467][ T6212] loop2: partition table partially beyond EOD, truncated [ 67.711719][ T6212] loop2: p3 start 335544320 is beyond EOD, truncated [ 68.074612][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 68.082875][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.127'. [ 68.092288][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.127'. [ 68.108846][ T5869] gspca_vc032x: reg_w err -71 [ 68.113693][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.124298][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.131703][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.136993][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.146793][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.155469][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.163131][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.168469][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.174161][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.179927][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.185296][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.190899][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.196609][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.202415][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.208304][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.214090][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.221400][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.226747][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 68.232219][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 68.237749][ T5869] gspca_vc032x: Unknown sensor... [ 68.244230][ T5869] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 68.254612][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 91, changing to 10 [ 68.277303][ T5869] usb 1-1: USB disconnect, device number 3 [ 68.283198][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.293364][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 68.299120][ T5858] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 68.314691][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.325383][ T5858] usb 4-1: config 0 descriptor?? [ 68.540205][ T5830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 68.549884][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: kworker/u9:5 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 68.549905][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.549917][ T5830] Workqueue: hci4 hci_rx_work [ 68.549950][ T5830] Call Trace: [ 68.549955][ T5830] [ 68.549961][ T5830] dump_stack_lvl+0x16c/0x1f0 [ 68.549985][ T5830] sysfs_warn_dup+0x7f/0xa0 [ 68.550011][ T5830] sysfs_create_dir_ns+0x24d/0x2b0 [ 68.550036][ T5830] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 68.550061][ T5830] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 68.550079][ T5830] ? kobject_add_internal+0x12d/0x990 [ 68.550103][ T5830] ? do_raw_spin_unlock+0x172/0x230 [ 68.550121][ T5830] kobject_add_internal+0x2c8/0x990 [ 68.550150][ T5830] kobject_add+0x16f/0x240 [ 68.550175][ T5830] ? __pfx_kobject_add+0x10/0x10 [ 68.550199][ T5830] ? class_to_subsys+0x3e/0x160 [ 68.550224][ T5830] ? do_raw_spin_unlock+0x172/0x230 [ 68.550240][ T5830] ? kobject_put+0xab/0x5a0 [ 68.550270][ T5830] device_add+0x289/0x1a70 [ 68.550293][ T5830] ? __pfx_dev_set_name+0x10/0x10 [ 68.550317][ T5830] ? __pfx_device_add+0x10/0x10 [ 68.550341][ T5830] ? mgmt_send_event_skb+0x2f2/0x460 [ 68.550372][ T5830] hci_conn_add_sysfs+0x17e/0x230 [ 68.550399][ T5830] le_conn_complete_evt+0x107f/0x1da0 [ 68.550430][ T5830] ? __pfx_lock_release+0x10/0x10 [ 68.550454][ T5830] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 68.550480][ T5830] ? __mutex_lock+0x1cc/0xb10 [ 68.550510][ T5830] hci_le_conn_complete_evt+0x23c/0x370 [ 68.550539][ T5830] hci_le_meta_evt+0x2e2/0x5d0 [ 68.550571][ T5830] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 68.550600][ T5830] hci_event_packet+0x666/0x1180 [ 68.550624][ T5830] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 68.550650][ T5830] ? __pfx_hci_event_packet+0x10/0x10 [ 68.550673][ T5830] ? mark_held_locks+0x9f/0xe0 [ 68.550698][ T5830] ? kcov_remote_start+0x3cf/0x6e0 [ 68.550724][ T5830] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.550750][ T5830] hci_rx_work+0x2c5/0x16b0 [ 68.550777][ T5830] ? process_one_work+0x921/0x1ba0 [ 68.550802][ T5830] process_one_work+0x9c5/0x1ba0 [ 68.550834][ T5830] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 68.550856][ T5830] ? __pfx_process_one_work+0x10/0x10 [ 68.550886][ T5830] ? assign_work+0x1a0/0x250 [ 68.550911][ T5830] worker_thread+0x6c8/0xf00 [ 68.550939][ T5830] ? __kthread_parkme+0x148/0x220 [ 68.550958][ T5830] ? __pfx_worker_thread+0x10/0x10 [ 68.550982][ T5830] kthread+0x3af/0x750 [ 68.551004][ T5830] ? __pfx_kthread+0x10/0x10 [ 68.551024][ T5830] ? lock_acquire+0x2f/0xb0 [ 68.551051][ T5830] ? __pfx_kthread+0x10/0x10 [ 68.551075][ T5830] ret_from_fork+0x45/0x80 [ 68.551098][ T5830] ? __pfx_kthread+0x10/0x10 [ 68.551119][ T5830] ret_from_fork_asm+0x1a/0x30 [ 68.551151][ T5830] [ 68.551168][ T5830] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 68.743843][ T5858] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 68.747514][ T5830] Bluetooth: hci4: failed to register connection device [ 68.836457][ T5858] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input7 [ 68.952918][ C1] usb 4-1: input irq status -75 received [ 68.964756][ T5858] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 69.185541][ T970] usb 4-1: USB disconnect, device number 4 [ 69.191515][ T5870] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 69.200649][ T5870] usb 5-1: device reset changed ep0 maxpacket size! [ 69.211426][ T5901] usb 5-1: USB disconnect, device number 2 [ 69.389864][ T5901] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.549295][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 69.556781][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.571856][ T5901] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 69.581275][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.589983][ T5901] usb 5-1: Product: syz [ 69.594224][ T5901] usb 5-1: Manufacturer: syz [ 69.598825][ T5901] usb 5-1: SerialNumber: syz [ 69.615567][ T5901] usb 5-1: config 0 descriptor?? [ 69.720094][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 69.729518][ T6253] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 69.738804][ T6253] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 69.749515][ T6253] Zero length message leads to an empty skb [ 69.883348][ T5901] usb 5-1: USB disconnect, device number 3 [ 69.958458][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 69.958472][ T29] audit: type=1400 audit(1740707789.518:253): avc: denied { create } for pid=6260 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.997907][ T29] audit: type=1400 audit(1740707789.558:254): avc: denied { connect } for pid=6260 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.023749][ T29] audit: type=1400 audit(1740707789.558:255): avc: denied { write } for pid=6260 comm="syz.0.143" path="socket:[9673]" dev="sockfs" ino=9673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.077680][ T6266] tipc: Started in network mode [ 70.082903][ T6265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.088065][ T6266] tipc: Node identity 4, cluster identity 4711 [ 70.107507][ T6266] tipc: Node number set to 4 [ 70.243929][ T6269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 70.360025][ T6275] capability: warning: `syz.0.149' uses 32-bit capabilities (legacy support in use) [ 70.443893][ T29] audit: type=1400 audit(1740707790.008:256): avc: denied { create } for pid=6277 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.482417][ T29] audit: type=1400 audit(1740707790.028:257): avc: denied { setopt } for pid=6277 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.553828][ T29] audit: type=1400 audit(1740707790.118:258): avc: denied { getopt } for pid=6279 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.716999][ T29] audit: type=1400 audit(1740707790.278:259): avc: denied { read } for pid=6287 comm="syz.4.155" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.739505][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.752672][ T29] audit: type=1400 audit(1740707790.298:260): avc: denied { create } for pid=6289 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.773195][ T29] audit: type=1400 audit(1740707790.298:261): avc: denied { setopt } for pid=6289 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.793942][ T29] audit: type=1400 audit(1740707790.298:262): avc: denied { bind } for pid=6289 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.931317][ T6297] ======================================================= [ 70.931317][ T6297] WARNING: The mand mount option has been deprecated and [ 70.931317][ T6297] and is ignored by this kernel. Remove the mand [ 70.931317][ T6297] option from the mount to silence this warning. [ 70.931317][ T6297] ======================================================= [ 71.001402][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.007944][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.124520][ T6305] process 'syz.1.162' launched './file2' with NULL argv: empty string added [ 71.266173][ T6308] netlink: 3 bytes leftover after parsing attributes in process `syz.4.165'. [ 71.649086][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.679045][ T970] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 71.823811][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.839273][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.854846][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.869081][ T5872] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.878144][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.892990][ T970] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 71.915556][ T5872] usb 3-1: config 0 descriptor?? [ 71.921648][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 71.932893][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 71.943112][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 71.958424][ T970] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 71.968056][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.980010][ T970] usb 2-1: Product: syz [ 71.984196][ T970] usb 2-1: Manufacturer: syz [ 71.988855][ T970] usb 2-1: SerialNumber: syz [ 71.993611][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.008829][ T970] usb 2-1: config 0 descriptor?? [ 72.019060][ T5870] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 72.169129][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 72.170208][ T5870] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 72.184166][ T5870] usb 4-1: config 0 has no interface number 0 [ 72.191212][ T5901] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 72.193327][ T5870] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 72.200324][ T5901] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 72.213482][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.224138][ T970] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 72.231658][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 72.236033][ T5870] usb 4-1: Product: syz [ 72.241903][ T5901] usb 5-1: config 1 has no interface number 0 [ 72.245923][ T5870] usb 4-1: Manufacturer: syz [ 72.250975][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.254966][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.256982][ T5870] usb 4-1: SerialNumber: syz [ 72.278566][ T5870] usb 4-1: config 0 descriptor?? [ 72.289583][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.295686][ T5901] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.307345][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.313455][ T5901] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 72.326487][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.332530][ T5901] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 72.341816][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.349973][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.356254][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.369642][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.386584][ T5901] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 72.398390][ T5872] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 72.406983][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.417498][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.426998][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.438011][ T5872] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.451536][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.459052][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.467794][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.479440][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.489049][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.495417][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.509702][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.516199][ T970] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 72.525608][ T970] input input8: Timeout waiting for response from device. [ 72.541719][ T970] usb 2-1: USB disconnect, device number 3 [ 72.600865][ T5901] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 72.648024][ T5869] usb 3-1: USB disconnect, device number 3 [ 72.675055][ T6349] tun0: tun_chr_ioctl cmd 1074025675 [ 72.686304][ T6349] tun0: persist enabled [ 72.692841][ T6349] tun0: tun_chr_ioctl cmd 1074025675 [ 72.698237][ T6349] tun0: persist disabled [ 72.855863][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.881654][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.890670][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.910373][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.931465][ T5870] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 72.941788][ T5870] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 72.950504][ T5870] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 72.958320][ T5870] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 72.967634][ T5870] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 73.146979][ T970] usb 5-1: USB disconnect, device number 4 [ 73.164433][ T970] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 73.271008][ T5901] usb 4-1: USB disconnect, device number 5 [ 73.297431][ T5901] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 73.308668][ T6371] netlink: 188 bytes leftover after parsing attributes in process `syz.1.192'. [ 73.323836][ T5901] keyspan 4-1:0.133: device disconnected [ 73.331230][ T6371] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 73.350263][ T6371] netlink: 188 bytes leftover after parsing attributes in process `syz.1.192'. [ 73.361261][ T6371] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 73.649025][ T5870] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.689435][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.822512][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 73.838870][ T5870] usb 1-1: too many configurations: 27, using maximum allowed: 8 [ 73.849946][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 73.856254][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.861818][ T5872] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 73.866921][ T5870] usb 1-1: config 0 has no interfaces? [ 73.881497][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.883030][ T5872] usb 2-1: config 0 has no interface number 0 [ 73.892505][ T5870] usb 1-1: config 0 has no interfaces? [ 73.905203][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.915658][ T5870] usb 1-1: config 0 has no interfaces? [ 73.922983][ T5872] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 73.928096][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.945560][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.947030][ T5870] usb 1-1: config 0 has no interfaces? [ 73.970653][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.980972][ T5870] usb 1-1: config 0 has no interfaces? [ 73.982538][ T5872] usb 2-1: Product: syz [ 73.987296][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.994570][ T5872] usb 2-1: Manufacturer: syz [ 74.005306][ T5870] usb 1-1: config 0 has no interfaces? [ 74.008146][ T5872] usb 2-1: SerialNumber: syz [ 74.012319][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.039934][ T5870] usb 1-1: config 0 has no interfaces? [ 74.047501][ T5872] usb 2-1: config 0 descriptor?? [ 74.047506][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.067043][ T5870] usb 1-1: config 0 has no interfaces? [ 74.074188][ T5870] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 74.079281][ T5901] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.086732][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.113788][ T5870] usb 1-1: Product: syz [ 74.117964][ T5870] usb 1-1: Manufacturer: syz [ 74.128967][ T5870] usb 1-1: SerialNumber: syz [ 74.141474][ T5870] usb 1-1: config 0 descriptor?? [ 74.266690][ T5872] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 74.274503][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 74.279727][ T5872] usb 2-1: No valid video chain found. [ 74.287566][ T5901] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.296209][ T5872] usb 2-1: USB disconnect, device number 4 [ 74.302922][ T5901] usb 5-1: config 179 has no interface number 0 [ 74.310206][ T5901] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 74.321329][ T5901] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 74.332632][ T5901] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.344123][ T5901] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 74.356439][ T5901] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.370042][ T5901] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.379141][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.389096][ T6390] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 74.469897][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'. [ 74.489156][ T5872] usb 1-1: USB disconnect, device number 4 [ 74.707190][ T5872] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 74.928661][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.942045][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.952476][ T5901] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 74.968792][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 74.968805][ T29] audit: type=1400 audit(1740707794.528:294): avc: denied { bind } for pid=6416 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.137858][ T5901] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 75.163044][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.203230][ T5901] usb 4-1: config 0 descriptor?? [ 75.213776][ T5872] usb 5-1: USB disconnect, device number 5 [ 75.219676][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 75.219711][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 75.336852][ T6432] mmap: syz.0.218 (6432) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.439114][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.486863][ T29] audit: type=1400 audit(1740707795.048:295): avc: denied { getopt } for pid=6434 comm="syz.0.219" laddr=::ac14:14aa lport=35072 faddr=fc01:: fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.544817][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 75.556696][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 75.570048][ T5858] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 75.590226][ T5870] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.604036][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 75.612888][ T5870] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.624589][ T5901] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 75.627108][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.638977][ T5901] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 75.643678][ T5870] usb 3-1: Product: syz [ 75.646290][ T5901] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 75.650725][ T5870] usb 3-1: Manufacturer: syz [ 75.650742][ T5870] usb 3-1: SerialNumber: syz [ 75.652969][ T5870] usb 3-1: config 0 descriptor?? [ 75.672339][ T5901] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 75.676284][ T5870] usb 3-1: selecting invalid altsetting 0 [ 75.687947][ T5901] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 75.706216][ T5901] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 75.719001][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 75.760472][ T5858] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.768732][ T5858] usb 2-1: config 179 has no interface number 0 [ 75.786663][ T5858] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 75.798103][ T5858] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 75.810535][ T5858] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.821774][ T5858] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 75.859274][ T29] audit: type=1400 audit(1740707795.388:296): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.910293][ T5858] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.931682][ T5901] usb 4-1: USB disconnect, device number 6 [ 75.948706][ T5858] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.957978][ T29] audit: type=1400 audit(1740707795.388:297): avc: denied { unlink } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.994576][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.013998][ T29] audit: type=1400 audit(1740707795.388:298): avc: denied { create } for pid=5175 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.029866][ T6430] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.060999][ T5870] usb 3-1: USB disconnect, device number 4 [ 76.096778][ T29] audit: type=1400 audit(1740707795.478:299): avc: denied { write } for pid=6442 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.102002][ T25] cfg80211: failed to load regulatory.db [ 76.157103][ T29] audit: type=1400 audit(1740707795.698:300): avc: denied { read } for pid=6446 comm="syz.0.225" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 76.184234][ T29] audit: type=1400 audit(1740707795.698:301): avc: denied { open } for pid=6446 comm="syz.0.225" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 76.208201][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.353046][ T5870] usb 2-1: USB disconnect, device number 5 [ 76.358896][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 76.358935][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 76.414465][ T29] audit: type=1400 audit(1740707795.978:302): avc: denied { read } for pid=6455 comm="syz.0.229" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.438538][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.488826][ T29] audit: type=1400 audit(1740707795.978:303): avc: denied { open } for pid=6455 comm="syz.0.229" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.819090][ T6472] netlink: 96 bytes leftover after parsing attributes in process `syz.2.236'. [ 77.025536][ T6479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.479401][ T5870] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.530138][ T5868] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 77.603092][ T6504] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.639057][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 77.642332][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 77.656691][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.680347][ T5870] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.689510][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 77.694690][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.703943][ T5868] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 77.712322][ T5868] usb 4-1: config 0 has no interface number 0 [ 77.718416][ T5868] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.733034][ T5870] usb 5-1: config 0 descriptor?? [ 77.738723][ T5868] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 77.753985][ T5868] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 77.766912][ T5868] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.784349][ T5868] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 77.793651][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.801832][ T5868] usb 4-1: Product: syz [ 77.806086][ T5868] usb 4-1: Manufacturer: syz [ 77.810805][ T5868] usb 4-1: SerialNumber: syz [ 77.817745][ T5868] usb 4-1: config 0 descriptor?? [ 77.830862][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.842575][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.857811][ T5872] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.896055][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.913698][ T5872] usb 2-1: config 0 descriptor?? [ 78.046619][ T5868] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 78.164524][ T5870] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 78.172771][ T5870] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 78.184030][ T5870] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 78.191299][ T5870] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 78.198846][ T5870] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 78.216498][ T5870] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 78.286775][ T5858] usb 4-1: USB disconnect, device number 7 [ 78.292704][ C1] iowarrior 4-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 78.310097][ T5870] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 78.323925][ T5870] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 78.330960][ T5872] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 78.342758][ T5870] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 78.353471][ T5870] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 78.381052][ T5872] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input10 [ 78.481405][ T5872] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 78.614150][ T5872] usb 2-1: USB disconnect, device number 6 [ 78.641140][ T5870] usb 5-1: USB disconnect, device number 6 [ 78.657710][ T6523] serio: Serial port ptm0 [ 79.256320][ T6541] pim6reg1: entered promiscuous mode [ 79.268976][ T6541] pim6reg1: entered allmulticast mode [ 79.418994][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 79.497863][ T6550] netlink: 566 bytes leftover after parsing attributes in process `syz.0.269'. [ 79.582155][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 79.588790][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 79.610682][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.630737][ T5870] usb 4-1: config 0 descriptor?? [ 79.679114][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.779056][ T5868] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.808653][ T6567] veth0_to_bond: entered promiscuous mode [ 79.821328][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 79.849229][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 79.867571][ T6567] veth0_to_bond (unregistering): left promiscuous mode [ 79.868488][ T5872] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.888070][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.897202][ T6567] bond0: (slave bond_slave_0): Releasing backup interface [ 79.899010][ T5872] usb 3-1: Product: syz [ 79.908690][ T5872] usb 3-1: Manufacturer: syz [ 79.917348][ T5872] usb 3-1: SerialNumber: syz [ 79.923674][ T5872] usb 3-1: config 0 descriptor?? [ 79.929329][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 79.935936][ T5868] usb 5-1: config 0 has no interfaces? [ 79.947422][ T5868] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 79.979381][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 79.988578][ T5868] usb 5-1: SerialNumber: syz [ 79.996539][ T5868] usb 5-1: config 0 descriptor?? [ 80.088288][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 80.088304][ T29] audit: type=1400 audit(1740707799.648:320): avc: denied { read } for pid=6572 comm="syz.1.279" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.124960][ T29] audit: type=1400 audit(1740707799.648:321): avc: denied { open } for pid=6572 comm="syz.1.279" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.150498][ T29] audit: type=1400 audit(1740707799.648:322): avc: denied { ioctl } for pid=6572 comm="syz.1.279" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.176116][ T5872] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.279078][ T5901] usb 5-1: USB disconnect, device number 7 [ 80.589240][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.651609][ T29] audit: type=1400 audit(1740707800.218:323): avc: denied { mount } for pid=6591 comm="syz.1.288" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.665262][ T5870] video4linux radio48: keene_cmd_set failed (-71) [ 80.686218][ T5870] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 80.688435][ T29] audit: type=1400 audit(1740707800.238:324): avc: denied { ioctl } for pid=6582 comm="syz.0.284" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.700086][ T5870] usb 4-1: USB disconnect, device number 8 [ 80.726666][ T29] audit: type=1400 audit(1740707800.258:325): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.772016][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 80.782725][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 80.799337][ T5872] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 80.813514][ T8] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 80.823345][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.840356][ T5872] usb 3-1: USB disconnect, device number 5 [ 80.846937][ T8] usb 1-1: Product: syz [ 80.859331][ T8] usb 1-1: Manufacturer: syz [ 80.864721][ T8] usb 1-1: SerialNumber: syz [ 80.879716][ T8] usb 1-1: config 0 descriptor?? [ 80.896319][ T6583] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 80.939053][ T6583] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 80.962048][ T29] audit: type=1400 audit(1740707800.528:326): avc: denied { create } for pid=6599 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 80.999949][ T29] audit: type=1400 audit(1740707800.548:327): avc: denied { bind } for pid=6599 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.026346][ T29] audit: type=1400 audit(1740707800.548:328): avc: denied { name_bind } for pid=6599 comm="syz.4.290" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 81.053475][ T29] audit: type=1400 audit(1740707800.548:329): avc: denied { node_bind } for pid=6599 comm="syz.4.290" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 81.141785][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 81.173549][ T6583] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 81.181092][ T6583] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 81.235011][ T6612] netlink: 96 bytes leftover after parsing attributes in process `syz.1.297'. [ 81.468687][ T6619] tipc: Started in network mode [ 81.474876][ T6619] tipc: Node identity 401, cluster identity 4711 [ 81.490238][ T6619] tipc: Node number set to 1025 [ 81.592895][ T8] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 82.006303][ T6643] ip6gretap1: entered promiscuous mode [ 82.120321][ T6647] syz.3.312: attempt to access beyond end of device [ 82.120321][ T6647] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.179820][ T970] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 82.197564][ T8] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 82.216397][ T8] usb 1-1: USB disconnect, device number 5 [ 82.264560][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.313'. [ 82.277822][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.313'. [ 82.369219][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 82.380856][ T970] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 82.395379][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.409679][ T970] usb 2-1: Product: syz [ 82.415049][ T970] usb 2-1: Manufacturer: syz [ 82.420026][ T970] usb 2-1: SerialNumber: syz [ 82.426464][ T970] usb 2-1: config 0 descriptor?? [ 82.435710][ T970] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 82.640837][ T970] gspca_sn9c2028: read1 error -32 [ 82.655671][ T970] gspca_sn9c2028: read1 error -32 [ 82.911583][ T970] usb 2-1: USB disconnect, device number 7 [ 83.088885][ T6670] netlink: 'syz.2.319': attribute type 10 has an invalid length. [ 83.149026][ T5868] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 83.170632][ T6670] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 83.299074][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 83.323671][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 83.354036][ T5868] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 83.373151][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.401560][ T5868] usb 1-1: config 0 descriptor?? [ 83.424921][ T5868] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 83.677539][ T5178] bcm5974 1-1:0.0: could not read from device [ 83.706795][ T5868] usb 1-1: USB disconnect, device number 6 [ 83.712964][ T5178] bcm5974 1-1:0.0: could not read from device [ 83.738334][ T5178] bcm5974 1-1:0.0: could not read from device [ 83.779055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.259966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.346927][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 85.346941][ T29] audit: type=1400 audit(1740707804.908:357): avc: denied { bind } for pid=6718 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.663157][ T29] audit: type=1400 audit(1740707805.208:358): avc: denied { create } for pid=6728 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 85.714623][ T29] audit: type=1400 audit(1740707805.218:359): avc: denied { write } for pid=6728 comm="syz.0.342" path="socket:[12548]" dev="sockfs" ino=12548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 85.769174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.805012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.813523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.841851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.932240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.942015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.969233][ T6737] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.990387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.019154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.035519][ T6737] netlink: 'syz.1.356': attribute type 12 has an invalid length. [ 86.064344][ T6737] netlink: 'syz.1.356': attribute type 29 has an invalid length. [ 86.083819][ T6737] netlink: 148 bytes leftover after parsing attributes in process `syz.1.356'. [ 86.116844][ T6737] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 86.135840][ T6737] netlink: 47 bytes leftover after parsing attributes in process `syz.1.356'. [ 86.563342][ T5868] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 86.739048][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 86.789571][ T5868] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 86.798278][ T5868] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 86.863758][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.881365][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.891004][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.905234][ T5868] usb 2-1: Product: syz [ 86.912978][ T5868] usb 2-1: Manufacturer: syz [ 86.917575][ T5868] usb 2-1: SerialNumber: syz [ 86.973699][ T5872] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.141962][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 87.151501][ T5872] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 87.167645][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.175747][ T5872] usb 5-1: Product: syz [ 87.180106][ T5872] usb 5-1: Manufacturer: syz [ 87.184711][ T5872] usb 5-1: SerialNumber: syz [ 87.189052][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.198589][ T5872] usb 5-1: config 0 descriptor?? [ 87.211687][ T5872] gspca_main: sq930x-2.14.0 probing 2770:930c [ 87.349038][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 87.356957][ T5869] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 87.365623][ T5869] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 87.386245][ T5869] usb 1-1: config 0 has no interface number 0 [ 87.392840][ T5869] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.404721][ T5869] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.429236][ T5869] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.444275][ T5868] usb 2-1: 0:2 : does not exist [ 87.456110][ T5868] usb 2-1: USB disconnect, device number 8 [ 87.470390][ T5869] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 87.485766][ T5869] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 87.506166][ T5869] usb 1-1: Product: syz [ 87.510542][ T5869] usb 1-1: Manufacturer: syz [ 87.516736][ T5869] usb 1-1: config 0 descriptor?? [ 87.660765][ T6245] udevd[6245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.757495][ T5869] usb 1-1: USB disconnect, device number 7 [ 87.926380][ T6780] ip6gre1: entered allmulticast mode [ 88.135889][ T6790] netlink: 80 bytes leftover after parsing attributes in process `syz.3.367'. [ 88.146022][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 88.219085][ T970] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.289039][ T5872] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 88.289060][ T5869] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 88.294887][ T5872] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 88.332254][ T5872] usb 5-1: USB disconnect, device number 8 [ 88.399032][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 88.405524][ T970] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 88.414023][ T970] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 88.422381][ T970] usb 1-1: config 0 has no interface number 0 [ 88.428457][ T970] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.440590][ T970] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.449103][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 88.451777][ T970] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.469712][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.469846][ T970] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 88.481682][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.494748][ T970] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 88.500335][ T5869] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 88.507861][ T970] usb 1-1: Product: syz [ 88.516761][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.524923][ T970] usb 1-1: Manufacturer: syz [ 88.532012][ T5869] usb 3-1: config 0 descriptor?? [ 88.535426][ T970] usb 1-1: config 0 descriptor?? [ 88.609065][ T5858] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 88.760237][ T5858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.770668][ T5858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.781907][ T5858] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.791643][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.799689][ T5858] usb 4-1: SerialNumber: syz [ 88.853918][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 88.965380][ T5869] hid-alps 0003:044E:120B.0009: unknown main item tag 0x1 [ 88.977730][ T5869] hid-alps 0003:044E:120B.0009: unknown main item tag 0x7 [ 88.988838][ T5869] hid-alps 0003:044E:120B.0009: unexpected long global item [ 89.018676][ T5869] hid-alps 0003:044E:120B.0009: parse failed [ 89.025476][ T29] audit: type=1400 audit(1740707808.588:360): avc: denied { create } for pid=6804 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.030786][ T5858] usb 4-1: 0:2 : does not exist [ 89.047723][ T29] audit: type=1400 audit(1740707808.608:361): avc: denied { connect } for pid=6804 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.050546][ T5869] hid-alps 0003:044E:120B.0009: probe with driver hid-alps failed with error -22 [ 89.103597][ T29] audit: type=1400 audit(1740707808.668:362): avc: denied { bind } for pid=6804 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.137585][ T5858] usb 4-1: USB disconnect, device number 9 [ 89.157748][ T970] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input14 [ 89.184612][ T9] usb 3-1: USB disconnect, device number 6 [ 89.221768][ T970] input: failed to attach handler kbd to device input14, error: -5 [ 89.264833][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 89.356627][ T6245] udevd[6245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.438316][ T9] usb 1-1: USB disconnect, device number 8 [ 89.575613][ T29] audit: type=1400 audit(1740707809.128:363): avc: denied { read } for pid=6826 comm="syz.1.384" path="socket:[12720]" dev="sockfs" ino=12720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.912397][ T29] audit: type=1400 audit(1740707809.478:364): avc: denied { map } for pid=6847 comm="syz.2.393" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.980864][ T29] audit: type=1400 audit(1740707809.498:365): avc: denied { execute } for pid=6847 comm="syz.2.393" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.066974][ T6856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.075788][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.395'. [ 90.137284][ T6852] veth3: entered promiscuous mode [ 90.150665][ T29] audit: type=1400 audit(1740707809.718:366): avc: denied { create } for pid=6857 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.177621][ T6852] veth3: entered allmulticast mode [ 90.452313][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 90.452327][ T29] audit: type=1400 audit(1740707810.018:369): avc: denied { create } for pid=6874 comm="syz.1.406" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.535311][ T29] audit: type=1400 audit(1740707810.018:370): avc: denied { write } for pid=6874 comm="syz.1.406" name="file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.639274][ T29] audit: type=1400 audit(1740707810.018:371): avc: denied { open } for pid=6874 comm="syz.1.406" path="/94/file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.712021][ T29] audit: type=1400 audit(1740707810.028:372): avc: denied { ioctl } for pid=6874 comm="syz.1.406" path="/94/file0" dev="tmpfs" ino=507 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.786023][ T29] audit: type=1400 audit(1740707810.078:373): avc: denied { unlink } for pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.865220][ T29] audit: type=1400 audit(1740707810.158:374): avc: denied { write } for pid=6880 comm="syz.1.408" path="socket:[12065]" dev="sockfs" ino=12065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.933088][ T29] audit: type=1400 audit(1740707810.378:375): avc: denied { sys_module } for pid=6886 comm="syz.2.411" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 91.080105][ T6888] syzkaller1: entered promiscuous mode [ 91.101000][ T6888] syzkaller1: entered allmulticast mode [ 91.120239][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 91.299187][ T29] audit: type=1400 audit(1740707810.858:376): avc: denied { append } for pid=6905 comm="syz.3.418" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.603479][ T6924] xt_hashlimit: size too large, truncated to 1048576 [ 91.670881][ T6928] : renamed from bond0 (while UP) [ 91.676206][ T29] audit: type=1400 audit(1740707811.238:377): avc: denied { ioctl } for pid=6923 comm="syz.4.424" path="socket:[12999]" dev="sockfs" ino=12999 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.821849][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 91.880352][ T29] audit: type=1400 audit(1740707811.448:378): avc: denied { setopt } for pid=6937 comm="syz.4.428" lport=54017 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 93.024109][ T7000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.129983][ T7006] geneve2: entered promiscuous mode [ 93.139335][ T7006] geneve2: entered allmulticast mode [ 93.439062][ T5858] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.607335][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.626357][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.648319][ T5858] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 93.677999][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.704260][ T5858] usb 1-1: config 0 descriptor?? [ 94.143035][ T5858] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 94.170660][ T5858] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 94.184713][ T5858] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 94.191956][ T5858] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 94.198748][ T5858] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 94.205855][ T5858] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 94.298988][ T5858] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 94.306952][ T5858] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 94.374016][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 94.762442][ T7065] trusted_key: syz.1.484 sent an empty control message without MSG_MORE. [ 94.781595][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.858740][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.940206][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.952742][ T5858] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 94.971024][ T5858] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 94.991849][ T5858] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 95.016702][ T5858] usb 1-1: USB disconnect, device number 9 [ 95.030237][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.102746][ T7072] kvm: Disabled LAPIC found during irq injection [ 95.209115][ T35] bridge_slave_1: left allmulticast mode [ 95.229232][ T35] bridge_slave_1: left promiscuous mode [ 95.236110][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.277955][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.291077][ T35] bridge_slave_0: left allmulticast mode [ 95.291298][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.296722][ T35] bridge_slave_0: left promiscuous mode [ 95.296843][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.319969][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.336582][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.346518][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.353929][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.547209][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 95.547223][ T29] audit: type=1400 audit(1740707815.108:406): avc: denied { write } for pid=7074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.608655][ T29] audit: type=1400 audit(1740707815.108:407): avc: denied { add_name } for pid=7074 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.673965][ T29] audit: type=1400 audit(1740707815.108:408): avc: denied { create } for pid=7074 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.733874][ T29] audit: type=1400 audit(1740707815.138:409): avc: denied { write } for pid=7074 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.799573][ T29] audit: type=1400 audit(1740707815.138:410): avc: denied { append } for pid=7074 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.823632][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.840706][ T29] audit: type=1400 audit(1740707815.268:411): avc: denied { remove_name } for pid=7097 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.865191][ T5831] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 95.875152][ T29] audit: type=1400 audit(1740707815.268:412): avc: denied { unlink } for pid=7097 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.106228][ T35]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.117884][ T35]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.133324][ T35]  (unregistering): Released all slaves [ 96.133463][ T29] audit: type=1400 audit(1740707815.698:413): avc: denied { mounton } for pid=7104 comm="syz.3.496" path="/proc/224/task" dev="proc" ino=13626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 96.168810][ T7086] batadv_slave_1: entered promiscuous mode [ 96.178104][ T7085] batadv_slave_1: left promiscuous mode [ 96.338766][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 96.369581][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 96.419693][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 96.421720][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 96.550751][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 96.659925][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 96.679067][ T35] hsr_slave_0: left promiscuous mode [ 96.687308][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 96.704740][ T35] hsr_slave_1: left promiscuous mode [ 96.710980][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.718464][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.727566][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.735226][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.756583][ T35] veth1_macvtap: left promiscuous mode [ 96.766124][ T35] veth0_macvtap: left promiscuous mode [ 96.771849][ T35] veth1_vlan: left promiscuous mode [ 96.777601][ T35] veth0_vlan: left promiscuous mode [ 97.135423][ T7115] ceph: No mds server is up or the cluster is laggy [ 97.379227][ T5825] Bluetooth: hci0: command tx timeout [ 97.475633][ T35] team0 (unregistering): Port device team_slave_1 removed [ 97.563070][ T35] team0 (unregistering): Port device team_slave_0 removed [ 97.699628][ T7173] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 97.712556][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.512'. [ 97.803609][ T5858] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.977998][ T5858] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.997448][ T5858] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.017441][ T5858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.026742][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 98.038134][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 98.051596][ T5858] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.089069][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.104892][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.114174][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.122463][ T7075] bridge_slave_0: entered allmulticast mode [ 98.129494][ T5858] usb 2-1: Product: syz [ 98.141968][ T5858] usb 2-1: Manufacturer: syz [ 98.149763][ T7075] bridge_slave_0: entered promiscuous mode [ 98.187919][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.196372][ T5858] cdc_wdm 2-1:1.0: skipping garbage [ 98.212327][ T5858] cdc_wdm 2-1:1.0: skipping garbage [ 98.221507][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.236401][ T5858] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 98.243861][ T7075] bridge_slave_1: entered allmulticast mode [ 98.250206][ T5858] cdc_wdm 2-1:1.0: Unknown control protocol [ 98.270725][ T7075] bridge_slave_1: entered promiscuous mode [ 98.432085][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.477360][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.499093][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 98.501731][ T5868] usb 2-1: USB disconnect, device number 9 [ 98.630628][ T7201] block nbd2: shutting down sockets [ 98.652061][ T7075] team0: Port device team_slave_0 added [ 98.689983][ T7075] team0: Port device team_slave_1 added [ 98.767813][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.781184][ T29] audit: type=1400 audit(1740707818.338:414): avc: denied { remount } for pid=7206 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.781548][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.841473][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.857545][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.868985][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.935969][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.000205][ T7075] hsr_slave_0: entered promiscuous mode [ 99.007373][ T7075] hsr_slave_1: entered promiscuous mode [ 99.013996][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.022215][ T7075] Cannot create hsr debugfs directory [ 99.105638][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 99.459221][ T5830] Bluetooth: hci0: command tx timeout [ 99.783678][ T7247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.788889][ T7075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.812290][ T7247] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 99.826898][ T7244] SELinux: failed to load policy [ 99.842364][ T7075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.867693][ T7075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.940855][ T7075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.041715][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.068344][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.082268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.089383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.104532][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.111638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.145378][ T7075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.158643][ T7075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.445019][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.646438][ T7290] Bluetooth: MGMT ver 1.23 [ 100.782676][ T29] audit: type=1326 audit(1740707820.348:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132358d169 code=0x7fc00000 [ 100.860995][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 100.923720][ T7075] veth0_vlan: entered promiscuous mode [ 100.952461][ T7075] veth1_vlan: entered promiscuous mode [ 101.033426][ T7075] veth0_macvtap: entered promiscuous mode [ 101.057035][ T7075] veth1_macvtap: entered promiscuous mode [ 101.097843][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.112707][ T5868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 101.133667][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.153956][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.175306][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.188959][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.215618][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.229254][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.254507][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.269769][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 101.276870][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.285012][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.303016][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.317955][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.335536][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=ec01, bcdDevice= 0.2e [ 101.341247][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.354837][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.370753][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.372336][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.405002][ T5868] usb 2-1: Product: syz [ 101.416112][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.426630][ T5868] usb 2-1: Manufacturer: syz [ 101.426648][ T5868] usb 2-1: SerialNumber: syz [ 101.463943][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.494152][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.523527][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.539669][ T5830] Bluetooth: hci0: command tx timeout [ 101.546108][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.573149][ T7075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.599030][ T7075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.607811][ T7075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.616704][ T7075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.736467][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.780085][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.848681][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.867866][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.887259][ T29] audit: type=1400 audit(1740707821.448:416): avc: denied { watch watch_reads } for pid=7337 comm="syz.0.553" path="/113/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 101.957969][ T29] audit: type=1400 audit(1740707821.448:417): avc: denied { mounton } for pid=7075 comm="syz-executor" path="/root/syzkaller.qqvj1x/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.030976][ T5868] usb 2-1: 0:2 : does not exist [ 102.298503][ T7356] program syz.3.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.367284][ T29] audit: type=1400 audit(1740707821.928:418): avc: denied { create } for pid=7363 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 102.389180][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.413501][ T29] audit: type=1400 audit(1740707821.928:419): avc: denied { sys_admin } for pid=7363 comm="syz.3.560" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 102.505285][ T29] audit: type=1400 audit(1740707822.068:420): avc: denied { setopt } for pid=7368 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.564524][ T8] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 102.578701][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.620626][ T8] usb 3-1: config 0 descriptor?? [ 102.697028][ T9] usb 2-1: USB disconnect, device number 10 [ 102.872282][ T8] kaweth 3-1:0.0: Firmware present in device. [ 103.048294][ T8] kaweth 3-1:0.0: Statistics collection: 0 [ 103.065795][ T8] kaweth 3-1:0.0: Multicast filter limit: 0 [ 103.084977][ T8] kaweth 3-1:0.0: MTU: 0 [ 103.092606][ T8] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 103.421933][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.671504][ T8] kaweth 3-1:0.0: kaweth interface created at eth1 [ 103.699444][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.715125][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.723253][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.741392][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.750319][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.757589][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.874674][ T9] usb 3-1: USB disconnect, device number 7 [ 103.974791][ T7413] chnl_net:caif_netlink_parms(): no params data found [ 104.130907][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.149850][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.177933][ T7413] bridge_slave_0: entered allmulticast mode [ 104.186737][ T7413] bridge_slave_0: entered promiscuous mode [ 104.210705][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.239079][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.246235][ T7413] bridge_slave_1: entered allmulticast mode [ 104.262579][ T29] audit: type=1400 audit(1740707823.828:421): avc: denied { map } for pid=7447 comm="syz.3.578" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.270096][ T7413] bridge_slave_1: entered promiscuous mode [ 104.338600][ T29] audit: type=1400 audit(1740707823.848:422): avc: denied { execute } for pid=7447 comm="syz.3.578" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.361731][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.436498][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.903503][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.124952][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.157740][ T7476] Bluetooth: MGMT ver 1.23 [ 105.207478][ T7413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.289179][ T7413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.423156][ T7413] team0: Port device team_slave_0 added [ 105.445287][ T7413] team0: Port device team_slave_1 added [ 105.563246][ T7413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.597441][ T7413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.636618][ T7413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.649774][ T7413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.656706][ T7413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.686962][ T7413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.712392][ T29] audit: type=1400 audit(1740707825.278:423): avc: denied { block_suspend } for pid=7484 comm="syz.1.585" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.774875][ T35] bridge_slave_1: left allmulticast mode [ 105.780676][ T5830] Bluetooth: hci0: command tx timeout [ 105.801920][ T35] bridge_slave_1: left promiscuous mode [ 105.812107][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.825362][ T35] bridge_slave_0: left allmulticast mode [ 105.831313][ T35] bridge_slave_0: left promiscuous mode [ 105.843737][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.869075][ T5858] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 105.909741][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 105.918743][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'. [ 106.021143][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 106.039266][ T5858] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.049325][ T5858] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.073420][ T5858] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.097588][ T5858] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.118114][ T5858] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.127912][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.158518][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 106.249050][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.261025][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.274050][ T35] bond0 (unregistering): Released all slaves [ 106.346454][ T7413] hsr_slave_0: entered promiscuous mode [ 106.358363][ T7413] hsr_slave_1: entered promiscuous mode [ 106.362377][ T5858] usb 3-1: GET_CAPABILITIES returned 0 [ 106.368151][ T7413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.372955][ T5858] usbtmc 3-1:16.0: can't read capabilities [ 106.381714][ T7413] Cannot create hsr debugfs directory [ 106.590065][ T29] audit: type=1400 audit(1740707826.158:424): avc: denied { read } for pid=7504 comm="syz.1.592" path="socket:[16431]" dev="sockfs" ino=16431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.614218][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.626075][ T9] usb 3-1: USB disconnect, device number 8 [ 106.635767][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 106.654777][ T35] hsr_slave_0: left promiscuous mode [ 106.681803][ T35] hsr_slave_1: left promiscuous mode [ 106.687679][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.705329][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.721805][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.732609][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.765175][ T35] veth1_macvtap: left promiscuous mode [ 106.771299][ T35] veth0_macvtap: left promiscuous mode [ 106.776962][ T35] veth1_vlan: left promiscuous mode [ 106.787609][ T35] veth0_vlan: left promiscuous mode [ 106.806596][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.827958][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.848473][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.876426][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.900572][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.923386][ T8] usb 1-1: config 0 descriptor?? [ 107.127457][ T35] team0 (unregistering): Port device team_slave_1 removed [ 107.185563][ T35] team0 (unregistering): Port device team_slave_0 removed [ 107.351872][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 107.389324][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.869086][ T5830] Bluetooth: hci0: command tx timeout [ 107.994589][ T7546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.170186][ T29] audit: type=1400 audit(1740707827.728:425): avc: denied { append } for pid=7550 comm="syz.3.601" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 108.214682][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 108.235436][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 108.533983][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 108.546120][ T7413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.549589][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 108.582021][ T7413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.607821][ T7413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.662360][ T7413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.831238][ T7413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.016291][ T7553] ceph: No mds server is up or the cluster is laggy [ 109.038672][ T7413] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.083730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.090845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.125612][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.132738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.454885][ T7413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.482600][ T9] usb 1-1: USB disconnect, device number 10 [ 109.639252][ T5872] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 109.840204][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.871630][ T7413] veth0_vlan: entered promiscuous mode [ 109.880593][ T5872] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 109.890789][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.898785][ T5872] usb 3-1: Product: syz [ 109.910986][ T7413] veth1_vlan: entered promiscuous mode [ 109.924632][ T5872] usb 3-1: Manufacturer: syz [ 109.934372][ T5872] usb 3-1: SerialNumber: syz [ 109.939153][ T5830] Bluetooth: hci0: command tx timeout [ 109.954658][ T5872] usb 3-1: config 0 descriptor?? [ 109.962462][ T7413] veth0_macvtap: entered promiscuous mode [ 109.976723][ T7413] veth1_macvtap: entered promiscuous mode [ 109.992286][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.019686][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 110.043681][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.059004][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.193762][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.235716][ T5868] usb 3-1: USB disconnect, device number 9 [ 110.259853][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.295200][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.300655][ T29] audit: type=1400 audit(1740707829.858:426): avc: denied { create } for pid=7608 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 110.327247][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.355186][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.379715][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.396543][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.407229][ T7413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.439473][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.448515][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.475398][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.500954][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.504138][ T29] audit: type=1400 audit(1740707830.068:427): avc: denied { read } for pid=7626 comm="syz.0.613" path="socket:[17606]" dev="sockfs" ino=17606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.519083][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.535314][ T9] usb 4-1: config 0 descriptor?? [ 110.554378][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.567980][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.601651][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.606777][ T29] audit: type=1400 audit(1740707830.168:428): avc: denied { write } for pid=7626 comm="syz.0.613" path="socket:[17607]" dev="sockfs" ino=17607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.617876][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.682045][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.702803][ T7413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.723464][ T7413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.732417][ T7413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.748118][ T7413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.757504][ T7413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.948709][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.972123][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.084522][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.093653][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.146635][ T5868] kernel write not supported for file [eventfd] (pid: 5868 comm: kworker/1:4) [ 111.789828][ T9] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 111.800496][ T9] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 111.840875][ T9] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 111.859086][ T9] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 111.875747][ T9] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 111.904102][ T9] usb 4-1: USB disconnect, device number 10 [ 112.275311][ T7685] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 112.355547][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 112.456952][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.650343][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 112.656374][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 112.927857][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.935502][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 112.942380][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 112.950300][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.958573][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.966406][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.975350][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.985942][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.047811][ T7709] netlink: 'syz.0.634': attribute type 29 has an invalid length. [ 113.070421][ T7709] netlink: 'syz.0.634': attribute type 29 has an invalid length. [ 113.082437][ T5872] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 113.093149][ T29] audit: type=1400 audit(1740707832.658:429): avc: denied { write } for pid=7708 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.114602][ T7709] netlink: 508 bytes leftover after parsing attributes in process `syz.0.634'. [ 113.117172][ T29] audit: type=1400 audit(1740707832.678:430): avc: denied { nlmsg_write } for pid=7708 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.240108][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 113.248513][ T5872] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.258071][ T5872] usb 2-1: config 0 has no interface number 0 [ 113.274935][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 113.285146][ T5872] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.296227][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.299125][ T7718] vlan2: entered allmulticast mode [ 113.306680][ T5872] usb 2-1: Product: syz [ 113.311126][ T7718] bond0: entered allmulticast mode [ 113.318653][ T7718] bond_slave_0: entered allmulticast mode [ 113.324781][ T7718] bond_slave_1: entered allmulticast mode [ 113.324836][ T5872] usb 2-1: Manufacturer: syz [ 113.341604][ T7718] bond0: left allmulticast mode [ 113.346466][ T7718] bond_slave_0: left allmulticast mode [ 113.355148][ T7718] bond_slave_1: left allmulticast mode [ 113.369191][ T5872] usb 2-1: SerialNumber: syz [ 113.387500][ T5872] usb 2-1: config 0 descriptor?? [ 113.397465][ T5872] smsc95xx v2.0.0 [ 113.431101][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.465502][ T7694] ceph: No mds server is up or the cluster is laggy [ 113.474424][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 113.494286][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 113.608136][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.687550][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.709095][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.716281][ T7706] bridge_slave_0: entered allmulticast mode [ 113.738892][ T7706] bridge_slave_0: entered promiscuous mode [ 113.799473][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.829608][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.840597][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.857870][ T7706] bridge_slave_1: entered allmulticast mode [ 113.879960][ T7706] bridge_slave_1: entered promiscuous mode [ 113.959747][ T7706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.014015][ T7706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.061641][ T7706] team0: Port device team_slave_0 added [ 114.073110][ T7706] team0: Port device team_slave_1 added [ 114.084500][ T12] bridge_slave_1: left allmulticast mode [ 114.090397][ T12] bridge_slave_1: left promiscuous mode [ 114.096020][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.105730][ T12] bridge_slave_0: left allmulticast mode [ 114.111637][ T12] bridge_slave_0: left promiscuous mode [ 114.117264][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.282307][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.650'. [ 114.432481][ T5872] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 114.451104][ T5872] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 114.466069][ T5872] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 114.475279][ T7757] input: syz0 as /devices/virtual/input/input15 [ 114.477295][ T5872] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 114.505758][ T5872] usb 2-1: USB disconnect, device number 11 [ 114.615997][ T7759] Bluetooth: MGMT ver 1.23 [ 114.641907][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.663264][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.693015][ T12] bond0 (unregistering): Released all slaves [ 114.841549][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.848692][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.879474][ T7706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.968569][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.977917][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.028760][ T7706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.059208][ T5830] Bluetooth: hci0: command tx timeout [ 115.103170][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 115.114735][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.654'. [ 115.162745][ T7706] hsr_slave_0: entered promiscuous mode [ 115.168813][ T7706] hsr_slave_1: entered promiscuous mode [ 115.175088][ T7706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.182939][ T7706] Cannot create hsr debugfs directory [ 115.379140][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 115.400875][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'. [ 115.541300][ T5869] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.558887][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.576138][ T5869] usb 2-1: config 0 descriptor?? [ 115.588611][ T5869] cp210x 2-1:0.0: cp210x converter detected [ 115.602879][ T7706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.622197][ T7706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.631673][ T7706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.645924][ T7706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.743133][ T7801] netlink: 'syz.2.668': attribute type 39 has an invalid length. [ 115.781335][ T7802] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 115.841353][ T7802] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 115.903388][ T7706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.937617][ T7706] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.972274][ T3976] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.979401][ T3976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.999631][ T5869] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 116.007836][ T3976] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.014875][ T3976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.031656][ T5869] usb 2-1: cp210x converter now attached to ttyUSB0 [ 116.285575][ T51] usb 2-1: USB disconnect, device number 12 [ 116.303008][ T51] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.363941][ T51] cp210x 2-1:0.0: device disconnected [ 116.434171][ T7706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.776035][ T7706] veth0_vlan: entered promiscuous mode [ 116.798906][ T7706] veth1_vlan: entered promiscuous mode [ 116.859797][ T7706] veth0_macvtap: entered promiscuous mode [ 116.905953][ T7706] veth1_macvtap: entered promiscuous mode [ 116.947934][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.979118][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.984394][ T25] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 116.986902][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.996834][ T25] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 117.001508][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.040144][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.050270][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.061886][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.072287][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.088956][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.132043][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.143199][ T5830] Bluetooth: hci0: command tx timeout [ 117.149439][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.161054][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.222124][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.242938][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.256433][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.275605][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.288789][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.303686][ T29] audit: type=1400 audit(1740707836.868:431): avc: denied { ioctl } for pid=7852 comm="syz.1.664" path="/dev/sg0" dev="devtmpfs" ino=728 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.308307][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.346113][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.357196][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.368027][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.378745][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.392913][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.417786][ T7706] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.426751][ T7706] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.436062][ T7706] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.445289][ T7706] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.692265][ T7873] ref_ctr_offset mismatch. inode: 0x2eb offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 119.219322][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.219327][ T5831] Bluetooth: hci0: command tx timeout [ 119.219443][ T25] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 119.245515][ T25] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 119.619651][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 121.299025][ T5831] Bluetooth: hci0: command 0x0419 tx timeout [ 121.305143][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 121.305555][ T25] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 121.317719][ T25] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 123.379752][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.380016][ T5831] Bluetooth: hci0: command 0x0419 tx timeout [ 123.387584][ T25] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 123.402984][ T25] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 125.539018][ T25] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 125.539081][ T5831] Bluetooth: hci0: command 0x0419 tx timeout [ 125.545100][ T25] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 132.421080][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.427403][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.865237][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.871888][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.312211][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.318506][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.499092][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 274.506871][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 274.514555][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.523285][ T30] task:kworker/u8:1 state:D stack:24240 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 274.539997][ T30] Workqueue: netns cleanup_net [ 274.544777][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.548030][ T30] [ 274.553240][ T30] __schedule+0xf43/0x5890 [ 274.557670][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 274.572950][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 274.578184][ T30] ? __pfx___schedule+0x10/0x10 [ 274.600325][ T30] ? schedule+0x298/0x350 [ 274.604667][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.618816][ T30] ? __mutex_trylock_common+0x78/0x250 [ 274.624473][ T30] ? lock_acquire+0x2f/0xb0 [ 274.637494][ T30] ? schedule+0x1fd/0x350 [ 274.642103][ T30] schedule+0xe7/0x350 [ 274.646170][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.651978][ T30] __mutex_lock+0x6bd/0xb10 [ 274.656489][ T30] ? rfkill_unregister+0xde/0x2c0 [ 274.661772][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.666801][ T30] ? device_del+0x6b6/0x9f0 [ 274.671399][ T30] ? __pfx_device_del+0x10/0x10 [ 274.676259][ T30] ? rfkill_unregister+0xde/0x2c0 [ 274.681287][ T30] rfkill_unregister+0xde/0x2c0 [ 274.686136][ T30] wiphy_unregister+0x134/0xc20 [ 274.691059][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 274.696434][ T30] ? rate_control_deinitialize+0x113/0x160 [ 274.702254][ T30] ieee80211_unregister_hw+0x248/0x3a0 [ 274.707707][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 274.712433][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.717630][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 274.723017][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 274.728727][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.733992][ T30] ops_exit_list+0xb0/0x180 [ 274.738494][ T30] cleanup_net+0x5c6/0xb30 [ 274.742985][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 274.747914][ T30] ? lock_acquire+0x2f/0xb0 [ 274.752465][ T30] ? process_one_work+0x921/0x1ba0 [ 274.757576][ T30] process_one_work+0x9c5/0x1ba0 [ 274.762566][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 274.767949][ T30] ? __pfx_process_one_work+0x10/0x10 [ 274.774063][ T30] ? assign_work+0x1a0/0x250 [ 274.778658][ T30] worker_thread+0x6c8/0xf00 [ 274.783304][ T30] ? __pfx_worker_thread+0x10/0x10 [ 274.788421][ T30] kthread+0x3af/0x750 [ 274.792600][ T30] ? __pfx_kthread+0x10/0x10 [ 274.797186][ T30] ? lock_acquire+0x2f/0xb0 [ 274.801789][ T30] ? __pfx_kthread+0x10/0x10 [ 274.806377][ T30] ret_from_fork+0x45/0x80 [ 274.810819][ T30] ? __pfx_kthread+0x10/0x10 [ 274.815401][ T30] ret_from_fork_asm+0x1a/0x30 [ 274.820263][ T30] [ 274.824675][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 274.833853][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 274.841484][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.850178][ T30] task:kworker/1:0 state:D stack:25136 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 274.862218][ T30] Workqueue: events rfkill_op_handler [ 274.867595][ T30] Call Trace: [ 274.870938][ T30] [ 274.873870][ T30] __schedule+0xf43/0x5890 [ 274.878264][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 274.883511][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 274.888724][ T30] ? __pfx___schedule+0x10/0x10 [ 274.893623][ T30] ? schedule+0x298/0x350 [ 274.897998][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.903050][ T30] ? __mutex_trylock_common+0x78/0x250 [ 274.908510][ T30] ? lock_acquire+0x2f/0xb0 [ 274.913161][ T30] ? schedule+0x1fd/0x350 [ 274.917477][ T30] schedule+0xe7/0x350 [ 274.921576][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.927026][ T30] __mutex_lock+0x6bd/0xb10 [ 274.931545][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 274.936738][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 274.941338][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.946355][ T30] ? find_held_lock+0x2d/0x110 [ 274.951200][ T30] ? rfkill_set_block+0x198/0x560 [ 274.956242][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.961308][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 274.965914][ T30] nfc_dev_down+0x2d/0x2e0 [ 274.970369][ T30] nfc_rfkill_set_block+0x39/0xe0 [ 274.975400][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 274.981597][ T30] rfkill_set_block+0x203/0x560 [ 274.986457][ T30] rfkill_epo+0x8e/0x1d0 [ 274.990780][ T30] rfkill_op_handler+0x262/0x280 [ 274.995730][ T30] process_one_work+0x9c5/0x1ba0 [ 275.000701][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 275.006332][ T30] ? __pfx_process_one_work+0x10/0x10 [ 275.011755][ T30] ? assign_work+0x1a0/0x250 [ 275.016359][ T30] worker_thread+0x6c8/0xf00 [ 275.021124][ T30] ? __pfx_worker_thread+0x10/0x10 [ 275.026250][ T30] kthread+0x3af/0x750 [ 275.030370][ T30] ? __pfx_kthread+0x10/0x10 [ 275.034967][ T30] ? lock_acquire+0x2f/0xb0 [ 275.039496][ T30] ? __pfx_kthread+0x10/0x10 [ 275.044081][ T30] ret_from_fork+0x45/0x80 [ 275.048473][ T30] ? __pfx_kthread+0x10/0x10 [ 275.053081][ T30] ret_from_fork_asm+0x1a/0x30 [ 275.057853][ T30] [ 275.061049][ T30] INFO: task kworker/1:3:5858 blocked for more than 143 seconds. [ 275.068744][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 275.076520][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.085198][ T30] task:kworker/1:3 state:D stack:21088 pid:5858 tgid:5858 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 275.097245][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 275.103957][ T30] Call Trace: [ 275.107212][ T30] [ 275.110189][ T30] __schedule+0xf43/0x5890 [ 275.114600][ T30] ? __pfx_mark_lock+0x10/0x10 [ 275.119437][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 275.124722][ T30] ? find_held_lock+0x2d/0x110 [ 275.129654][ T30] ? __pfx___schedule+0x10/0x10 [ 275.134499][ T30] ? schedule+0x298/0x350 [ 275.138807][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.143900][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.149304][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.154499][ T30] schedule+0xe7/0x350 [ 275.158544][ T30] schedule_preempt_disabled+0x13/0x30 [ 275.164008][ T30] __mutex_lock+0x6bd/0xb10 [ 275.168525][ T30] ? lock_acquire+0x2f/0xb0 [ 275.173065][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 275.179441][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 275.184463][ T30] ? rcu_is_watching+0x12/0xc0 [ 275.189268][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 275.194461][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 275.200822][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 275.206967][ T30] process_one_work+0x9c5/0x1ba0 [ 275.211941][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 275.217580][ T30] ? __pfx_process_one_work+0x10/0x10 [ 275.223095][ T30] ? assign_work+0x1a0/0x250 [ 275.227682][ T30] worker_thread+0x6c8/0xf00 [ 275.232400][ T30] ? __kthread_parkme+0x148/0x220 [ 275.237419][ T30] ? __pfx_worker_thread+0x10/0x10 [ 275.242665][ T30] kthread+0x3af/0x750 [ 275.246729][ T30] ? __pfx_kthread+0x10/0x10 [ 275.251342][ T30] ? lock_acquire+0x2f/0xb0 [ 275.255843][ T30] ? __pfx_kthread+0x10/0x10 [ 275.260483][ T30] ret_from_fork+0x45/0x80 [ 275.264895][ T30] ? __pfx_kthread+0x10/0x10 [ 275.269538][ T30] ret_from_fork_asm+0x1a/0x30 [ 275.274313][ T30] [ 275.277351][ T30] INFO: task syz-executor:7706 blocked for more than 144 seconds. [ 275.287596][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 275.295249][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.303993][ T30] task:syz-executor state:D stack:23872 pid:7706 tgid:7706 ppid:1 task_flags:0x400140 flags:0x00000004 [ 275.315952][ T30] Call Trace: [ 275.319271][ T30] [ 275.322203][ T30] __schedule+0xf43/0x5890 [ 275.326603][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 275.331848][ T30] ? __pfx___schedule+0x10/0x10 [ 275.336688][ T30] ? schedule+0x298/0x350 [ 275.341030][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.346055][ T30] ? __mutex_trylock_common+0x78/0x250 [ 275.351664][ T30] ? lock_acquire+0x2f/0xb0 [ 275.356165][ T30] ? schedule+0x1fd/0x350 [ 275.360501][ T30] schedule+0xe7/0x350 [ 275.364560][ T30] schedule_preempt_disabled+0x13/0x30 [ 275.370085][ T30] __mutex_lock+0x6bd/0xb10 [ 275.374586][ T30] ? rfkill_fop_open+0x13b/0x750 [ 275.379670][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 275.384694][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 275.390248][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 275.395529][ T30] ? rfkill_fop_open+0x13b/0x750 [ 275.400496][ T30] rfkill_fop_open+0x13b/0x750 [ 275.405266][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 275.410958][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 275.416240][ T30] misc_open+0x35a/0x420 [ 275.420491][ T30] ? __pfx_misc_open+0x10/0x10 [ 275.425242][ T30] chrdev_open+0x237/0x6a0 [ 275.429676][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 275.434634][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 275.441424][ T30] do_dentry_open+0x735/0x1c40 [ 275.446179][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 275.451154][ T30] ? inode_permission+0xdd/0x5f0 [ 275.456092][ T30] vfs_open+0x82/0x3f0 [ 275.460423][ T30] ? may_open+0x1f2/0x400 [ 275.464756][ T30] path_openat+0x1e88/0x2d80 [ 275.469431][ T30] ? __pfx_path_openat+0x10/0x10 [ 275.474412][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 275.479643][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 275.485099][ T30] ? find_held_lock+0x2d/0x110 [ 275.489897][ T30] do_filp_open+0x20c/0x470 [ 275.494392][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 275.499429][ T30] ? find_held_lock+0x2d/0x110 [ 275.504208][ T30] ? alloc_fd+0x41f/0x760 [ 275.508516][ T30] do_sys_openat2+0x17a/0x1e0 [ 275.513220][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 275.518411][ T30] ? kmem_cache_free+0x179/0x4d0 [ 275.523364][ T30] ? security_file_free+0xb9/0x180 [ 275.528471][ T30] ? __fput+0x68d/0xb70 [ 275.532681][ T30] __x64_sys_openat+0x175/0x210 [ 275.537535][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 275.543056][ T30] do_syscall_64+0xcd/0x250 [ 275.547573][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.553512][ T30] RIP: 0033:0x7f4e1058bad0 [ 275.557914][ T30] RSP: 002b:00007ffdf1015bd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 275.566333][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4e1058bad0 [ 275.574401][ T30] RDX: 0000000000000002 RSI: 00007f4e1060ed21 RDI: 00000000ffffff9c [ 275.582376][ T30] RBP: 00007f4e1060ed21 R08: 0000000000000000 R09: 0000000000000000 [ 275.590388][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 275.598345][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 275.606331][ T30] [ 275.609406][ T30] INFO: task syz.0.646:7741 blocked for more than 144 seconds. [ 275.616931][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 275.624615][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.633296][ T30] task:syz.0.646 state:D stack:26048 pid:7741 tgid:7741 ppid:5816 task_flags:0x400040 flags:0x00004004 [ 275.645228][ T30] Call Trace: [ 275.648492][ T30] [ 275.651445][ T30] __schedule+0xf43/0x5890 [ 275.655854][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 275.661091][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 275.666303][ T30] ? __pfx___schedule+0x10/0x10 [ 275.671200][ T30] ? schedule+0x298/0x350 [ 275.675530][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.680714][ T30] ? __mutex_trylock_common+0x78/0x250 [ 275.686162][ T30] ? lock_acquire+0x2f/0xb0 [ 275.690718][ T30] ? schedule+0x1fd/0x350 [ 275.695039][ T30] schedule+0xe7/0x350 [ 275.699182][ T30] schedule_preempt_disabled+0x13/0x30 [ 275.704649][ T30] __mutex_lock+0x6bd/0xb10 [ 275.709234][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 275.714423][ T30] ? rfkill_unregister+0xde/0x2c0 [ 275.719478][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 275.724495][ T30] ? device_del+0x6b6/0x9f0 [ 275.729030][ T30] ? __pfx_device_del+0x10/0x10 [ 275.733876][ T30] ? rfkill_unregister+0xde/0x2c0 [ 275.738929][ T30] rfkill_unregister+0xde/0x2c0 [ 275.743777][ T30] nfc_unregister_device+0x94/0x330 [ 275.749001][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 275.754714][ T30] virtual_ncidev_close+0x4b/0xa0 [ 275.759772][ T30] __fput+0x3ff/0xb70 [ 275.763753][ T30] task_work_run+0x14e/0x250 [ 275.768334][ T30] ? __pfx_task_work_run+0x10/0x10 [ 275.773483][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 275.779263][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 275.784892][ T30] do_syscall_64+0xda/0x250 [ 275.789546][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.795446][ T30] RIP: 0033:0x7f270998d169 [ 275.799887][ T30] RSP: 002b:00007ffe232411f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 275.808301][ T30] RAX: 0000000000000000 RBX: 00007f2709ba7ba0 RCX: 00007f270998d169 [ 275.816323][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 275.824310][ T30] RBP: 00007f2709ba7ba0 R08: 0000000000016b9c R09: 00000006232414ef [ 275.832296][ T30] R10: 00007f2709ba7ac0 R11: 0000000000000246 R12: 000000000001c04e [ 275.840303][ T30] R13: 00007ffe232412f0 R14: ffffffffffffffff R15: 00007ffe23241310 [ 275.848254][ T30] [ 275.851322][ T30] INFO: task syz.3.670:7890 blocked for more than 144 seconds. [ 275.858850][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 275.866561][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.875239][ T30] task:syz.3.670 state:D stack:28416 pid:7890 tgid:7887 ppid:5820 task_flags:0x400040 flags:0x00004004 [ 275.887167][ T30] Call Trace: [ 275.890475][ T30] [ 275.893398][ T30] __schedule+0xf43/0x5890 [ 275.897788][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 275.903133][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 275.908348][ T30] ? __pfx___schedule+0x10/0x10 [ 275.913217][ T30] ? schedule+0x298/0x350 [ 275.917534][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.922569][ T30] ? __mutex_trylock_common+0x78/0x250 [ 275.928024][ T30] ? lock_acquire+0x2f/0xb0 [ 275.932558][ T30] ? schedule+0x1fd/0x350 [ 275.936892][ T30] schedule+0xe7/0x350 [ 275.940995][ T30] schedule_preempt_disabled+0x13/0x30 [ 275.946452][ T30] __mutex_lock+0x6bd/0xb10 [ 275.951000][ T30] ? misc_open+0x63/0x420 [ 275.955320][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 275.960361][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 275.965646][ T30] ? chrdev_open+0x10e/0x6a0 [ 275.970262][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.975302][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 275.980970][ T30] ? __pfx_misc_open+0x10/0x10 [ 275.985733][ T30] ? misc_open+0x63/0x420 [ 275.990113][ T30] misc_open+0x63/0x420 [ 275.994260][ T30] ? __pfx_misc_open+0x10/0x10 [ 275.999059][ T30] chrdev_open+0x237/0x6a0 [ 276.003469][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 276.008383][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 276.015292][ T30] do_dentry_open+0x735/0x1c40 [ 276.020089][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 276.025002][ T30] ? inode_permission+0xdd/0x5f0 [ 276.029979][ T30] vfs_open+0x82/0x3f0 [ 276.034056][ T30] ? may_open+0x1f2/0x400 [ 276.038406][ T30] path_openat+0x1e88/0x2d80 [ 276.043021][ T30] ? __pfx_path_openat+0x10/0x10 [ 276.047950][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.053170][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 276.058456][ T30] ? find_held_lock+0x2d/0x110 [ 276.063255][ T30] do_filp_open+0x20c/0x470 [ 276.067762][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 276.072854][ T30] ? find_held_lock+0x2d/0x110 [ 276.077618][ T30] ? alloc_fd+0x41f/0x760 [ 276.081981][ T30] do_sys_openat2+0x17a/0x1e0 [ 276.086656][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.091904][ T30] ? do_user_addr_fault+0xe50/0x13f0 [ 276.097185][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.102286][ T30] __x64_sys_openat+0x175/0x210 [ 276.107152][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 276.112674][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 276.117961][ T30] do_syscall_64+0xcd/0x250 [ 276.122596][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.128479][ T30] RIP: 0033:0x7f132358d169 [ 276.132926][ T30] RSP: 002b:00007f13213f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.141352][ T30] RAX: ffffffffffffffda RBX: 00007f13237a5fa0 RCX: 00007f132358d169 [ 276.149361][ T30] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000000 [ 276.157321][ T30] RBP: 00007f132360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.165296][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.173287][ T30] R13: 0000000000000001 R14: 00007f13237a5fa0 R15: 00007fff7dbb6ec8 [ 276.181289][ T30] [ 276.184307][ T30] INFO: task syz.3.670:7895 blocked for more than 145 seconds. [ 276.191914][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 276.199576][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.208232][ T30] task:syz.3.670 state:D stack:28416 pid:7895 tgid:7887 ppid:5820 task_flags:0x400040 flags:0x00000004 [ 276.220352][ T30] Call Trace: [ 276.223630][ T30] [ 276.226553][ T30] __schedule+0xf43/0x5890 [ 276.231233][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.236434][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.241678][ T30] ? __pfx___schedule+0x10/0x10 [ 276.246530][ T30] ? schedule+0x298/0x350 [ 276.251008][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.256032][ T30] ? __mutex_trylock_common+0x78/0x250 [ 276.261579][ T30] ? lock_acquire+0x2f/0xb0 [ 276.266078][ T30] ? schedule+0x1fd/0x350 [ 276.270433][ T30] schedule+0xe7/0x350 [ 276.274502][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.279995][ T30] __mutex_lock+0x6bd/0xb10 [ 276.284493][ T30] ? misc_open+0x63/0x420 [ 276.288794][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.293841][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 276.299169][ T30] ? chrdev_open+0x10e/0x6a0 [ 276.303750][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.308767][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 276.314414][ T30] ? __pfx_misc_open+0x10/0x10 [ 276.319242][ T30] ? misc_open+0x63/0x420 [ 276.323561][ T30] misc_open+0x63/0x420 [ 276.327691][ T30] ? __pfx_misc_open+0x10/0x10 [ 276.332475][ T30] chrdev_open+0x237/0x6a0 [ 276.336887][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 276.341972][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 276.348745][ T30] do_dentry_open+0x735/0x1c40 [ 276.353540][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 276.358496][ T30] ? inode_permission+0xdd/0x5f0 [ 276.363479][ T30] vfs_open+0x82/0x3f0 [ 276.367529][ T30] ? may_open+0x1f2/0x400 [ 276.371886][ T30] path_openat+0x1e88/0x2d80 [ 276.376487][ T30] ? __pfx_path_openat+0x10/0x10 [ 276.381453][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.386645][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 276.391951][ T30] ? find_held_lock+0x2d/0x110 [ 276.396708][ T30] do_filp_open+0x20c/0x470 [ 276.401250][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 276.406262][ T30] ? find_held_lock+0x2d/0x110 [ 276.411048][ T30] ? alloc_fd+0x41f/0x760 [ 276.415368][ T30] do_sys_openat2+0x17a/0x1e0 [ 276.420389][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.425706][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.430842][ T30] __x64_sys_openat+0x175/0x210 [ 276.435690][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 276.441122][ T30] do_syscall_64+0xcd/0x250 [ 276.445623][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.451646][ T30] RIP: 0033:0x7f132358d169 [ 276.456049][ T30] RSP: 002b:00007f13213d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.464482][ T30] RAX: ffffffffffffffda RBX: 00007f13237a6080 RCX: 00007f132358d169 [ 276.472480][ T30] RDX: 0000000000000000 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 276.480516][ T30] RBP: 00007f132360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.488486][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.496488][ T30] R13: 0000000000000000 R14: 00007f13237a6080 R15: 00007fff7dbb6ec8 [ 276.504560][ T30] [ 276.507580][ T30] INFO: task syz.1.671:7912 blocked for more than 145 seconds. [ 276.515140][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 276.522804][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.531508][ T30] task:syz.1.671 state:D stack:28416 pid:7912 tgid:7910 ppid:5817 task_flags:0x400040 flags:0x00000004 [ 276.543444][ T30] Call Trace: [ 276.546698][ T30] [ 276.549651][ T30] __schedule+0xf43/0x5890 [ 276.554074][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.559434][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.564634][ T30] ? __pfx___schedule+0x10/0x10 [ 276.569510][ T30] ? schedule+0x298/0x350 [ 276.573833][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.578968][ T30] ? __mutex_trylock_common+0x78/0x250 [ 276.584428][ T30] ? lock_acquire+0x2f/0xb0 [ 276.588960][ T30] ? schedule+0x1fd/0x350 [ 276.593282][ T30] schedule+0xe7/0x350 [ 276.597324][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.602798][ T30] __mutex_lock+0x6bd/0xb10 [ 276.607304][ T30] ? misc_open+0x63/0x420 [ 276.611671][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.616701][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 276.622050][ T30] ? chrdev_open+0x10e/0x6a0 [ 276.626639][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.631710][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 276.637338][ T30] ? __pfx_misc_open+0x10/0x10 [ 276.642158][ T30] ? misc_open+0x63/0x420 [ 276.646475][ T30] misc_open+0x63/0x420 [ 276.650647][ T30] ? __pfx_misc_open+0x10/0x10 [ 276.655398][ T30] chrdev_open+0x237/0x6a0 [ 276.659921][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 276.664851][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 276.671742][ T30] do_dentry_open+0x735/0x1c40 [ 276.676495][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 276.681456][ T30] ? inode_permission+0xdd/0x5f0 [ 276.686386][ T30] vfs_open+0x82/0x3f0 [ 276.690474][ T30] ? may_open+0x1f2/0x400 [ 276.694798][ T30] path_openat+0x1e88/0x2d80 [ 276.699455][ T30] ? __pfx_path_openat+0x10/0x10 [ 276.704381][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.709612][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 276.714896][ T30] ? find_held_lock+0x2d/0x110 [ 276.719707][ T30] do_filp_open+0x20c/0x470 [ 276.724202][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 276.729251][ T30] ? find_held_lock+0x2d/0x110 [ 276.734015][ T30] ? alloc_fd+0x41f/0x760 [ 276.738322][ T30] do_sys_openat2+0x17a/0x1e0 [ 276.743266][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.748483][ T30] ? do_user_addr_fault+0xe50/0x13f0 [ 276.753831][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.758916][ T30] __x64_sys_openat+0x175/0x210 [ 276.763815][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 276.769805][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 276.775104][ T30] do_syscall_64+0xcd/0x250 [ 276.779678][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.785568][ T30] RIP: 0033:0x7f493198d169 [ 276.789996][ T30] RSP: 002b:00007f493288d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.798401][ T30] RAX: ffffffffffffffda RBX: 00007f4931ba5fa0 RCX: 00007f493198d169 [ 276.806377][ T30] RDX: 0000000000000000 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 276.814426][ T30] RBP: 00007f4931a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.822498][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.830481][ T30] R13: 0000000000000001 R14: 00007f4931ba5fa0 R15: 00007fffdb46f8b8 [ 276.838432][ T30] [ 276.841466][ T30] INFO: task syz.2.674:7933 blocked for more than 145 seconds. [ 276.849019][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 276.856631][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.865295][ T30] task:syz.2.674 state:D stack:28304 pid:7933 tgid:7932 ppid:5828 task_flags:0x400040 flags:0x00000004 [ 276.877246][ T30] Call Trace: [ 276.881115][ T30] [ 276.884052][ T30] __schedule+0xf43/0x5890 [ 276.888470][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.894229][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 276.899508][ T30] ? __pfx___schedule+0x10/0x10 [ 276.904405][ T30] ? schedule+0x298/0x350 [ 276.908711][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.913741][ T30] ? __mutex_trylock_common+0x78/0x250 [ 276.919720][ T30] ? lock_acquire+0x2f/0xb0 [ 276.924222][ T30] ? schedule+0x1fd/0x350 [ 276.928526][ T30] schedule+0xe7/0x350 [ 276.932607][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.938058][ T30] __mutex_lock+0x6bd/0xb10 [ 276.942579][ T30] ? misc_open+0x63/0x420 [ 276.946899][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.951943][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 276.957227][ T30] ? chrdev_open+0x10e/0x6a0 [ 276.961870][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.966893][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 276.972531][ T30] ? __pfx_misc_open+0x10/0x10 [ 276.977286][ T30] ? misc_open+0x63/0x420 [ 276.981712][ T30] misc_open+0x63/0x420 [ 276.985863][ T30] ? __pfx_misc_open+0x10/0x10 [ 276.990651][ T30] chrdev_open+0x237/0x6a0 [ 276.995082][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 277.000069][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 277.006852][ T30] do_dentry_open+0x735/0x1c40 [ 277.011688][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 277.016621][ T30] ? inode_permission+0xdd/0x5f0 [ 277.021607][ T30] vfs_open+0x82/0x3f0 [ 277.025671][ T30] ? may_open+0x1f2/0x400 [ 277.030051][ T30] path_openat+0x1e88/0x2d80 [ 277.034645][ T30] ? __pfx_path_openat+0x10/0x10 [ 277.039614][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 277.044808][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 277.050147][ T30] ? find_held_lock+0x2d/0x110 [ 277.054914][ T30] do_filp_open+0x20c/0x470 [ 277.059493][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 277.064510][ T30] ? find_held_lock+0x2d/0x110 [ 277.069303][ T30] ? alloc_fd+0x41f/0x760 [ 277.073625][ T30] do_sys_openat2+0x17a/0x1e0 [ 277.078276][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.083484][ T30] ? do_user_addr_fault+0xe50/0x13f0 [ 277.088764][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.093834][ T30] __x64_sys_openat+0x175/0x210 [ 277.098680][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 277.104079][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 277.109408][ T30] do_syscall_64+0xcd/0x250 [ 277.113908][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.119817][ T30] RIP: 0033:0x7f749cf8d169 [ 277.124223][ T30] RSP: 002b:00007f749dd26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 277.132681][ T30] RAX: ffffffffffffffda RBX: 00007f749d1a5fa0 RCX: 00007f749cf8d169 [ 277.140744][ T30] RDX: 0000000000000000 RSI: 0000400000000440 RDI: ffffffffffffff9c [ 277.148726][ T30] RBP: 00007f749d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 277.156959][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.164938][ T30] R13: 0000000000000001 R14: 00007f749d1a5fa0 R15: 00007ffe94282818 [ 277.172974][ T30] [ 277.175986][ T30] INFO: task syz-executor:7938 blocked for more than 146 seconds. [ 277.183798][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 277.191420][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.200097][ T30] task:syz-executor state:D stack:28416 pid:7938 tgid:7938 ppid:1 task_flags:0x400040 flags:0x00000000 [ 277.212043][ T30] Call Trace: [ 277.215311][ T30] [ 277.218218][ T30] __schedule+0xf43/0x5890 [ 277.222686][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 277.227883][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 277.233098][ T30] ? __pfx___schedule+0x10/0x10 [ 277.237940][ T30] ? schedule+0x298/0x350 [ 277.242316][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.247337][ T30] ? __mutex_trylock_common+0x78/0x250 [ 277.252816][ T30] ? lock_acquire+0x2f/0xb0 [ 277.257318][ T30] ? schedule+0x1fd/0x350 [ 277.261701][ T30] schedule+0xe7/0x350 [ 277.265768][ T30] schedule_preempt_disabled+0x13/0x30 [ 277.271236][ T30] __mutex_lock+0x6bd/0xb10 [ 277.275716][ T30] ? misc_open+0x63/0x420 [ 277.280085][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 277.285103][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 277.290408][ T30] ? chrdev_open+0x10e/0x6a0 [ 277.294991][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.302699][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 277.308339][ T30] ? __pfx_misc_open+0x10/0x10 [ 277.313370][ T30] ? misc_open+0x63/0x420 [ 277.317693][ T30] misc_open+0x63/0x420 [ 277.321874][ T30] ? __pfx_misc_open+0x10/0x10 [ 277.326626][ T30] chrdev_open+0x237/0x6a0 [ 277.331068][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 277.335998][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 277.342772][ T30] do_dentry_open+0x735/0x1c40 [ 277.347525][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 277.352475][ T30] ? inode_permission+0xdd/0x5f0 [ 277.357409][ T30] vfs_open+0x82/0x3f0 [ 277.361501][ T30] ? may_open+0x1f2/0x400 [ 277.365827][ T30] path_openat+0x1e88/0x2d80 [ 277.370442][ T30] ? __pfx_path_openat+0x10/0x10 [ 277.375377][ T30] ? handle_mm_fault+0x497/0xaa0 [ 277.380405][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 277.385608][ T30] do_filp_open+0x20c/0x470 [ 277.390130][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 277.395144][ T30] ? find_held_lock+0x2d/0x110 [ 277.399934][ T30] ? alloc_fd+0x41f/0x760 [ 277.404257][ T30] do_sys_openat2+0x17a/0x1e0 [ 277.408955][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.414151][ T30] ? fd_install+0x242/0x750 [ 277.418625][ T30] __x64_sys_openat+0x175/0x210 [ 277.423478][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 277.428851][ T30] do_syscall_64+0xcd/0x250 [ 277.433378][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.439304][ T30] RIP: 0033:0x7f05ab18ba51 [ 277.443708][ T30] RSP: 002b:00007fffac6567b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 277.452142][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f05ab18ba51 [ 277.460256][ T30] RDX: 0000000000000002 RSI: 00007f05ab20ec76 RDI: 00000000ffffff9c [ 277.468217][ T30] RBP: 00007f05ab20ec76 R08: 0000000000000000 R09: 00007f05abedd6c0 [ 277.476408][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 277.484389][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 277.492400][ T30] [ 277.495419][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 277.504463][ T30] [ 277.504463][ T30] Showing all locks held in the system: [ 277.512438][ T30] 4 locks held by kworker/u8:1/12: [ 277.517541][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 277.527933][ T30] #1: ffffc90000117d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 277.537871][ T30] #2: ffffffff8fee14d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 277.547279][ T30] #3: ffffffff9039a908 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 277.557522][ T30] 4 locks held by kworker/1:0/25: [ 277.562558][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 277.573027][ T30] #1: ffffc900001f7d18 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 277.583386][ T30] #2: ffffffff9039a908 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 277.592902][ T30] #3: ffff888055391100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 277.601910][ T30] 1 lock held by khungtaskd/30: [ 277.606741][ T30] #0: ffffffff8e1bccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 277.616606][ T30] 2 locks held by getty/5575: [ 277.621312][ T30] #0: ffff88803623a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 277.631094][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 277.641221][ T30] 3 locks held by kworker/1:3/5858: [ 277.646407][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 277.656877][ T30] #1: ffffc900041efd18 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 277.669787][ T30] #2: ffffffff9039a908 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 277.681219][ T30] 2 locks held by syz-executor/7706: [ 277.686487][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.694936][ T30] #1: ffffffff9039a908 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x13b/0x750 [ 277.705018][ T30] 2 locks held by syz.0.646/7741: [ 277.710165][ T30] #0: ffff888055391100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 277.720050][ T30] #1: ffffffff9039a908 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 277.730279][ T30] 1 lock held by syz.3.670/7890: [ 277.735268][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.743717][ T30] 1 lock held by syz.3.670/7895: [ 277.748638][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.757139][ T30] 1 lock held by syz.1.671/7912: [ 277.762110][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.770588][ T30] 1 lock held by syz.2.674/7933: [ 277.775516][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.784247][ T30] 1 lock held by syz-executor/7938: [ 277.789464][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.797908][ T30] 1 lock held by syz-executor/7941: [ 277.803116][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.811573][ T30] 1 lock held by syz-executor/7942: [ 277.816738][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.825177][ T30] 1 lock held by syz-executor/7944: [ 277.830383][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.838825][ T30] 1 lock held by syz-executor/7946: [ 277.844026][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.852501][ T30] 1 lock held by syz-executor/7948: [ 277.857668][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.866115][ T30] 1 lock held by syz-executor/7951: [ 277.871324][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.879827][ T30] 1 lock held by syz-executor/7952: [ 277.885018][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.893483][ T30] 1 lock held by syz-executor/7954: [ 277.898649][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.907088][ T30] 1 lock held by syz-executor/7960: [ 277.912302][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.920759][ T30] 1 lock held by syz-executor/7962: [ 277.925942][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.934393][ T30] 1 lock held by syz-executor/7965: [ 277.939598][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.948041][ T30] 1 lock held by syz-executor/7966: [ 277.953245][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.961718][ T30] 1 lock held by syz-executor/7968: [ 277.966883][ T30] #0: ffffffff8eec2d68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 277.975341][ T30] [ 277.977651][ T30] ============================================= [ 277.977651][ T30] [ 277.986135][ T30] NMI backtrace for cpu 1 [ 277.986144][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 277.986162][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.986171][ T30] Call Trace: [ 277.986175][ T30] [ 277.986181][ T30] dump_stack_lvl+0x116/0x1f0 [ 277.986202][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 277.986225][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 277.986245][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 277.986271][ T30] watchdog+0xf62/0x12b0 [ 277.986297][ T30] ? __pfx_watchdog+0x10/0x10 [ 277.986317][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.986337][ T30] ? __kthread_parkme+0x148/0x220 [ 277.986353][ T30] ? __pfx_watchdog+0x10/0x10 [ 277.986376][ T30] kthread+0x3af/0x750 [ 277.986396][ T30] ? __pfx_kthread+0x10/0x10 [ 277.986417][ T30] ? __pfx_kthread+0x10/0x10 [ 277.986435][ T30] ret_from_fork+0x45/0x80 [ 277.986454][ T30] ? __pfx_kthread+0x10/0x10 [ 277.986471][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.986497][ T30] [ 277.986503][ T30] Sending NMI from CPU 1 to CPUs 0: [ 278.097796][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 278.103526][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 278.103538][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 278.103554][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.103564][ T30] Call Trace: [ 278.103569][ T30] [ 278.103575][ T30] dump_stack_lvl+0x3d/0x1f0 [ 278.103595][ T30] panic+0x71d/0x800 [ 278.103613][ T30] ? __pfx_panic+0x10/0x10 [ 278.103628][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 278.103649][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 278.103669][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 278.103688][ T30] ? watchdog+0xdcc/0x12b0 [ 278.103709][ T30] ? watchdog+0xdbf/0x12b0 [ 278.103731][ T30] watchdog+0xddd/0x12b0 [ 278.103754][ T30] ? __pfx_watchdog+0x10/0x10 [ 278.103774][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.103792][ T30] ? __kthread_parkme+0x148/0x220 [ 278.103812][ T30] ? __pfx_watchdog+0x10/0x10 [ 278.103833][ T30] kthread+0x3af/0x750 [ 278.103851][ T30] ? __pfx_kthread+0x10/0x10 [ 278.103871][ T30] ? __pfx_kthread+0x10/0x10 [ 278.103889][ T30] ret_from_fork+0x45/0x80 [ 278.103907][ T30] ? __pfx_kthread+0x10/0x10 [ 278.103924][ T30] ret_from_fork_asm+0x1a/0x30 [ 278.103950][ T30] [ 278.232075][ T30] Kernel Offset: disabled [ 278.236373][ T30] Rebooting in 86400 seconds..